CVE-2024-49694
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Dec 31, 2024
CWE ID 862
Summary
CVE-2024-49694 represents a Missing Authorization vulnerability in the My Wp Brand – Hide menu & Hide Plugin. Affecting versions from n/a to 1.1.2, this issue allows unauthorized users to access functionalities they should not have been able to reach. The absence of proper authorization checks puts WordPress websites using this plugin at risk. Attackers could potentially modify, delete or access sensitive information on vulnerable sites. Users are advised to update their plugins to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.