Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-2441

May 14, 2024, 4:13 p.m.

Product(s) Impacted

VikBooking Hotel Booking Engine & PMS WordPress plugin

before 1.6.8

Description

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of the VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's they shouldn't be allowed to.

Weaknesses

Date

Published: May 14, 2024, 3:19 p.m.

Last Modified: May 14, 2024, 4:13 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

contact@wpscan.com

References

https://wpscan.com/ contact@wpscan.com