CVE-2024-2038: Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.22.6. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible for unauthenticated attackers to modify plugin settings, delete posts, modify post titles, and upload images.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2038?
CVE-2024-2038 is rated as a critical vulnerability due to unauthorized access risks from hardcoded credentials.
How do I fix CVE-2024-2038?
To fix CVE-2024-2038, update the Atarim plugin to version 3.22.7 or later, which addresses the vulnerability.
What versions of Atarim are affected by CVE-2024-2038?
All versions of the Atarim plugin up to and including 3.22.6 are affected by CVE-2024-2038.
What kind of access can be gained due to CVE-2024-2038?
CVE-2024-2038 allows attackers to gain unauthorized access to API requests, compromising site security.
Who is the vendor of the product affected by CVE-2024-2038?
The vendor of the product affected by CVE-2024-2038 is Atarim.