CVE-2024-43326CWE-862

WordPress Plugin Notes Plus plugin <= 1.2.7 - Arbitrary Content Deletion vulnerability

Medium · published August 19, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
23.1
In the wild
Unconfirmed
What it is

Missing Authorization vulnerability in Jamie Bergen Plugin Notes Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Plugin Notes Plus: from n/a through 1.2.7.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00314 · 23.1th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-08-19T19:25Z
EPSS history
Timeline
  • 19 AUG 19:25Z
    WordPress Plugin Notes Plus plugin <= 1.2.7 - Arbitrary Content Deletion vulnerability
    cvelistv5