Unrated
WordPress SiteOrigin Widgets Bundle plugin <= 1.64.0 - Broken Access Control vulnerability
CVE-2024-54268
First seen on SecPulse
Original description The description as published by the source.
Missing Authorization vulnerability in Greg - SiteOrigin SiteOrigin Widgets Bundle so-widgets-bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteOrigin Widgets Bundle: from n/a through <= 1.64.0.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory patchstack.com
- web wordpress.org