CVE-2024-2038CWE-259

Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials

High · published May 23, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.22.6. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible for unauthenticated attackers to modify plugin settings, delete posts, modify post titles, and upload images.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00494 · 41.5th percentile
Weakness
CWE-259 · Use of Hard-coded Password
Published
2024-05-23T06:46Z
EPSS history
Timeline
  • 23 MAY 06:46Z
    Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials
    cvelistv5