CVE-2024-43981: WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability

Q: What is the severity of CVE-2024-43981?

CVE-2024-43981 is classified as a medium severity vulnerability due to missing authorization in the AyeCode – WP Business Directory Plugins GeoDirectory.

Q: How do I fix CVE-2024-43981?

To fix CVE-2024-43981, update the GeoDirectory plugin to version 2.3.71 or later.

Q: What versions are affected by CVE-2024-43981?

CVE-2024-43981 affects GeoDirectory versions from n/a through 2.3.70.

Q: What kind of vulnerability is CVE-2024-43981?

CVE-2024-43981 is a missing authorization vulnerability that allows exploitation due to incorrectly configured access control security levels.

Q: Who is impacted by CVE-2024-43981?

Users of the AyeCode GeoDirectory plugin for WordPress versions up to 2.3.70 are impacted by CVE-2024-43981.

Published Nov 1, 2024

Updated

Missing Authorization vulnerability in AyeCode – WP Business Directory Plugins GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GeoDirectory: from n/a through 2.3.70.

Affected Software

1 affected component

AyeCode Geodirectory Wordpress<2.3.71

Remediation

Information

Update to 2.3.71 or a higher version.

Event History

Nov 1, 2024

CVE Published

via MITRE·02:17 PM

Data Sourced

via MITRE·02:17 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-43981?

CVE-2024-43981 is classified as a medium severity vulnerability due to missing authorization in the AyeCode – WP Business Directory Plugins GeoDirectory.

How do I fix CVE-2024-43981?

To fix CVE-2024-43981, update the GeoDirectory plugin to version 2.3.71 or later.

What versions are affected by CVE-2024-43981?