CVE-2021-24318CWE-284

Listeo < 1.6.11 - Multiple Authenticated IDOR Vulnerabilities

published June 1, 2021

CVSS
—
EPSS
1%
Percentile
62.0
In the wild
Unconfirmed
What it is

The Listeo WordPress theme before 1.6.11 did not ensure that the Post/Page and Booking to delete belong to the user making the request, allowing any authenticated users to delete arbitrary page/post and booking via an IDOR vector.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00986 · 62.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-06-01T11:33Z
EPSS history
Timeline
  • 01 JUN 11:33Z
    Listeo < 1.6.11 - Multiple Authenticated IDOR Vulnerabilities
    cvelistv5