CVE-2024-39664: WordPress Filter & Grids plugin <= 2.8.32 - Broken Authentication vulnerability
Published Nov 1, 2024
·Updated
Missing Authorization vulnerability in YMC Filter & Grids allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Filter & Grids: from n/a through 2.8.33.
Affected Software
2 affected components
YMC Filter & Grids>=n/a<2.8.33
WordPress Filter & Grids<=2.8.32
Remediation
Information
Update to 2.8.34 or a higher version.
Event History
Nov 1, 2024
CVE Published
via MITRE·02:17 PM
Data Sourced
via MITRE·02:17 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-39664?
CVE-2024-39664 has a critical severity level due to missing authorization that allows unauthorized access to certain functionalities.
2
How do I fix CVE-2024-39664?
To fix CVE-2024-39664, update your YMC Filter & Grids plugin to the latest version beyond 2.8.33.
3
What kind of vulnerability is CVE-2024-39664?
CVE-2024-39664 is classified as a Missing Authorization vulnerability in YMC Filter & Grids.
4
Which versions of YMC Filter & Grids are affected by CVE-2024-39664?
CVE-2024-39664 affects YMC Filter & Grids versions from n/a through 2.8.33.
5
Can CVE-2024-39664 impact user data security?
Yes, CVE-2024-39664 can potentially lead to unauthorized access to user functionalities, impacting overall user data security.