CVE-2024-38719: WordPress Auto Featured Image plugin <= 4.1.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Creative Motion Auto Featured Image (Auto Post Thumbnail) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through 4.1.2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38719?
CVE-2024-38719 has a severity rating that indicates a significant risk due to missing authorization vulnerabilities.
How do I fix CVE-2024-38719?
To fix CVE-2024-38719, update the Creative Motion Auto Featured Image plugin to version 4.1.3 or later.
What causes CVE-2024-38719?
CVE-2024-38719 is caused by incorrectly configured access control security levels within the plugin.
What versions of Auto Featured Image are affected by CVE-2024-38719?
CVE-2024-38719 affects all versions of Auto Featured Image (Auto Post Thumbnail) from the beginning up to and including version 4.1.2.
Who is affected by CVE-2024-38719?
Users of the Creative Motion Auto Featured Image plugin up to version 4.1.2 are vulnerable to CVE-2024-38719.