CVE-2024-34371: WordPress Login with phone number plugin <= 1.7.18 - Broken Access Control vulnerability
Published May 6, 2024
·Updated
Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.7.18.
Affected Software
1 affected component
Hamid Alinia Login with Phone Number<=1.7.18
Remediation
Information
Update to 1.7.20 or a higher version.
Event History
May 6, 2024
CVE Published
via MITRE·07:04 PM
Data Sourced
via MITRE·07:04 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-34371?
CVE-2024-34371 is classified as a missing authorization vulnerability affecting versions up to 1.7.18.
2
How do I fix CVE-2024-34371?
To fix CVE-2024-34371, update the affected software to a version that is not vulnerable.
3
What software is affected by CVE-2024-34371?
CVE-2024-34371 affects the Hamid Alinia idehweb Login with phone number and WordPress Login with phone number plugin up to version 1.7.18.
4
Can CVE-2024-34371 lead to unauthorized access?
Yes, CVE-2024-34371 can potentially allow unauthorized access due to the missing authorization checks.
5
When was CVE-2024-34371 disclosed?
The specific disclosure date of CVE-2024-34371 is not provided, but it affects software versions up to 1.7.18.