Authorization Flaw in My Wp Brand – Hide Menu & Plugin by IMW3
CVE-2024-49694
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 31 December 2024
What is CVE-2024-49694?
A missing authorization vulnerability has been identified within the My Wp Brand – Hide Menu & Hide Plugin. This flaw allows unauthorized users to access restricted functionalities, potentially leading to sensitive data exposure. The affected versions range from n/a to 1.1.2, indicating a broader vulnerability within earlier implementations. Organizations using this plugin should take immediate action to mitigate risks associated with broken access control, ensuring the integrity and security of their WordPress environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
My Wp Brand – Hide menu & Hide Plugin <= 1.1.2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved