CVE-2024-24703: WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability
Published Jun 11, 2024
·Updated
Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25.
Affected Software
2 affected components
MultiVendorX WC Marketplace>=n/a, <=4.0.25
MultiVendorX MultiVendorX Plugin<=4.0.25
Remediation
Information
Update to 4.0.26 or a higher version.
Event History
Jun 11, 2024
CVE Published
via MITRE·02:54 PM
Data Sourced
via MITRE·02:54 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-24703?
CVE-2024-24703 is classified as a missing authorization vulnerability, which could lead to unauthorized access.
2
How do I fix CVE-2024-24703?
To fix CVE-2024-24703, update MultiVendorX WC Marketplace or MultiVendorX Plugin to the latest version beyond 4.0.25.
3
Which versions are affected by CVE-2024-24703?
CVE-2024-24703 affects MultiVendorX WC Marketplace from n/a through 4.0.25 and MultiVendorX Plugin up to 4.0.25.
4
What does CVE-2024-24703 expose?
CVE-2024-24703 exposes a risk of unauthorized actions by users due to inadequate authorization checks.
5
Is it safe to use versions prior to 4.1.1 for MultiVendorX?
Using versions prior to 4.1.1 for MultiVendorX is not safe due to the identified vulnerabilities including CVE-2024-24703.