What is the severity of CVE-2024-7424?

CVE-2024-7424 is classified as a medium severity vulnerability due to its potential for unauthorized data modification and access.

How do I fix CVE-2024-7424?

To mitigate CVE-2024-7424, upgrade the Multiple Page Generator Plugin to version 4.0.2 or higher.

Who is affected by CVE-2024-7424?

CVE-2024-7424 affects all versions of the Multiple Page Generator Plugin for WordPress up to and including 4.0.1.

What type of vulnerability is CVE-2024-7424?

CVE-2024-7424 is a vulnerability due to missing capability checks, allowing unauthorized access and modification of data.

Can CVE-2024-7424 be exploited by unauthenticated users?

No, CVE-2024-7424 requires authentication for exploitation, allowing only authenticated attackers to leverage the vulnerability.

Vulnerability/
CVE-2024-7424

medium

5.4

CWE

284

1/11/2024

CVE-2024-7424: Multiple Page Generator Plugin – MPG <= 4.0.1 - Missing Authorization

First published: Fri Nov 01 2024(Updated: )

The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to unauthorized modification of and access to data due to a missing capability check on several functions in all versions up to, and including, 4.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to invoke those functions intended for admin use resulting in subscribers being able to upload csv files and view the contents of MPG projects.

Credit: security@wordfence.com

Affected Software	Affected Version	How to fix
WordPress Multiple Page Generator Plugin	<=4.0.1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-7424?
CVE-2024-7424 is classified as a medium severity vulnerability due to its potential for unauthorized data modification and access.
How do I fix CVE-2024-7424?
To mitigate CVE-2024-7424, upgrade the Multiple Page Generator Plugin to version 4.0.2 or higher.
Who is affected by CVE-2024-7424?
CVE-2024-7424 affects all versions of the Multiple Page Generator Plugin for WordPress up to and including 4.0.1.
What type of vulnerability is CVE-2024-7424?
CVE-2024-7424 is a vulnerability due to missing capability checks, allowing unauthorized access and modification of data.
Can CVE-2024-7424 be exploited by unauthenticated users?
No, CVE-2024-7424 requires authentication for exploitation, allowing only authenticated attackers to leverage the vulnerability.

agent/weakness
agent/title
agent/references
agent/description
agent/first-publish-date
agent/type
agent/severity
agent/author
agent/event
collector/nvd-api
source/NVD
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/softwarecombine
agent/tags
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/multiple page generator
canonical/wordpress multiple page generator plugin

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2024-7424?
CVE-2024-7424 is classified as a medium severity vulnerability due to its potential for unauthorized data modification and access.
How do I fix CVE-2024-7424?
To mitigate CVE-2024-7424, upgrade the Multiple Page Generator Plugin to version 4.0.2 or higher.
Who is affected by CVE-2024-7424?
CVE-2024-7424 affects all versions of the Multiple Page Generator Plugin for WordPress up to and including 4.0.1.
What type of vulnerability is CVE-2024-7424?
CVE-2024-7424 is a vulnerability due to missing capability checks, allowing unauthorized access and modification of data.
Can CVE-2024-7424 be exploited by unauthenticated users?
No, CVE-2024-7424 requires authentication for exploitation, allowing only authenticated attackers to leverage the vulnerability.