Authorization Flaw in My Wp Brand – Hide Menu & Plugin by IMW3

CVE-2024-49694

What is CVE-2024-49694?

A missing authorization vulnerability has been identified within the My Wp Brand – Hide Menu & Hide Plugin. This flaw allows unauthorized users to access restricted functionalities, potentially leading to sensitive data exposure. The affected versions range from n/a to 1.1.2, indicating a broader vulnerability within earlier implementations. Organizations using this plugin should take immediate action to mitigate risks associated with broken access control, ensuring the integrity and security of their WordPress environments.

References