CVE-2024-49256: WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability
Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through <= 1.0.18.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49256?
CVE-2024-49256 has been assessed as a medium severity vulnerability due to incorrect authorization issues.
How do I fix CVE-2024-49256?
To fix CVE-2024-49256, update the WPChill Htaccess File Editor plugin to version 1.0.19 or later.
What functionality is affected by CVE-2024-49256?
CVE-2024-49256 affects the access control of the WPChill Htaccess File Editor, allowing unauthorized access to its functionalities.
Which versions of the WPChill Htaccess File Editor are impacted by CVE-2024-49256?
CVE-2024-49256 impacts versions of the WPChill Htaccess File Editor from n/a through 1.0.18.
Is there a known exploit for CVE-2024-49256?
Currently, there are no publicly documented exploits for CVE-2024-49256, but it is advisable to update the software as a precaution.