What is the severity of CVE-2024-2038?

CVE-2024-2038 is rated as a critical vulnerability due to unauthorized access risks from hardcoded credentials.

How do I fix CVE-2024-2038?

To fix CVE-2024-2038, update the Atarim plugin to version 3.22.7 or later, which addresses the vulnerability.

What versions of Atarim are affected by CVE-2024-2038?

All versions of the Atarim plugin up to and including 3.22.6 are affected by CVE-2024-2038.

What kind of access can be gained due to CVE-2024-2038?

CVE-2024-2038 allows attackers to gain unauthorized access to API requests, compromising site security.

Who is the vendor of the product affected by CVE-2024-2038?

The vendor of the product affected by CVE-2024-2038 is Atarim.

Vulnerability/
CVE-2024-2038

high

7.5

CWE

259

23/5/2024

1/8/2024

CVE-2024-2038: Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials

First published: Thu May 23 2024(Updated: )

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.22.6. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible for unauthenticated attackers to modify plugin settings, delete posts, modify post titles, and upload images.

Credit: security@wordfence.com

Affected Software	Affected Version	How to fix
Atarim	<=3.22.6

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-2038?
CVE-2024-2038 is rated as a critical vulnerability due to unauthorized access risks from hardcoded credentials.
How do I fix CVE-2024-2038?
To fix CVE-2024-2038, update the Atarim plugin to version 3.22.7 or later, which addresses the vulnerability.
What versions of Atarim are affected by CVE-2024-2038?
All versions of the Atarim plugin up to and including 3.22.6 are affected by CVE-2024-2038.
What kind of access can be gained due to CVE-2024-2038?
CVE-2024-2038 allows attackers to gain unauthorized access to API requests, compromising site security.
Who is the vendor of the product affected by CVE-2024-2038?
The vendor of the product affected by CVE-2024-2038 is Atarim.

agent/weakness
agent/references
agent/title
agent/description
agent/first-publish-date
agent/type
agent/author
agent/severity
agent/event
collector/nvd-api
source/NVD
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/softwarecombine
agent/tags
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/atarim
canonical/atarim

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2024-2038?
CVE-2024-2038 is rated as a critical vulnerability due to unauthorized access risks from hardcoded credentials.
How do I fix CVE-2024-2038?
To fix CVE-2024-2038, update the Atarim plugin to version 3.22.7 or later, which addresses the vulnerability.
What versions of Atarim are affected by CVE-2024-2038?
All versions of the Atarim plugin up to and including 3.22.6 are affected by CVE-2024-2038.
What kind of access can be gained due to CVE-2024-2038?
CVE-2024-2038 allows attackers to gain unauthorized access to API requests, compromising site security.
Who is the vendor of the product affected by CVE-2024-2038?
The vendor of the product affected by CVE-2024-2038 is Atarim.