CVE-2024-32799: WordPress Easy Property Listings plugin <= 3.5.3 - Broken Access Control vulnerability
Published Jun 9, 2024
·Updated
Missing Authorization vulnerability in Merv Barrett Easy Property Listings.This issue affects Easy Property Listings: from n/a through 3.5.3.
Affected Software
3 affected components
Realestateconnected Easy Property Listings Wordpress<3.5.4
Merv Barrett Easy Property Listings<=3.5.3
WordPress Easy Property Listings<=3.5.3
Remediation
Information
Update to 3.5.4 or a higher version.
Event History
Jun 9, 2024
CVE Published
via MITRE·12:50 PM
Data Sourced
via MITRE·12:50 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
May 25, 57072
Event
via NVD·09:46 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-32799?
CVE-2024-32799 is classified as a Missing Authorization vulnerability, which poses a critical security risk.
2
How do I fix CVE-2024-32799?
To remediate CVE-2024-32799, upgrade Easy Property Listings to version 3.5.4 or later.
3
What versions of Easy Property Listings are affected by CVE-2024-32799?
CVE-2024-32799 affects Easy Property Listings versions from n/a through 3.5.3.
4
Who is the vendor for CVE-2024-32799?
The vendor for CVE-2024-32799 is Merv Barrett, associated with the Easy Property Listings plugin.
5
What type of vulnerability is CVE-2024-32799?
CVE-2024-32799 is a Missing Authorization vulnerability that can lead to unauthorized access.