CVE-2024-43250CWE-863

WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability

High · published August 19, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a through 2.6.4.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00285 · 19.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-08-19T17:21Z
EPSS history
Timeline
  • 19 AUG 17:21Z
    WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Plugin Settings Change vulnerability
    cvelistv5