Unauthorized Data Modification Vulnerability in Spreadsheet Integration Plugin
CVE-2024-6590
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 25 September 2024
What is CVE-2024-6590?
The Spreadsheet Integration β Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 3.7.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit post status, edit Google sheet integrations, and create Google sheet integrations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Spreadsheet Integration β Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. * <= 3.7.9
References
CVSS V3.1
Timeline
Vulnerability published