CVE-2024-43162: WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability
Published Nov 1, 2024
·Updated
Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.2.12.
Affected Software
3 affected components
Awesomemotive Easy Digital Downloads Wordpress<3.3.0
Easy Digital Downloads Easy Digital Downloads<=3.2.12
WordPress Easy Digital Downloads<=3.2.12
Remediation
Information
Update to 3.3.1 or a higher version.
Event History
Nov 1, 2024
CVE Published
via MITRE·02:17 PM
Data Sourced
via MITRE·02:17 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 22, 57075
Event
via NVD·07:32 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-43162?
CVE-2024-43162 is classified as a missing authorization vulnerability with significant implications for access control.
2
How do I fix CVE-2024-43162?
To fix CVE-2024-43162, update Easy Digital Downloads to version 3.2.13 or newer.
3
What versions of Easy Digital Downloads are affected by CVE-2024-43162?
CVE-2024-43162 affects Easy Digital Downloads versions up to and including 3.2.12.
4
What type of vulnerability is CVE-2024-43162?
CVE-2024-43162 is categorized as a missing authorization vulnerability.
5
Can CVE-2024-43162 lead to unauthorized access?
Yes, CVE-2024-43162 can lead to unauthorized access due to incorrectly configured access control security levels.