CVE-2024-55991
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Dec 31, 2024
CWE ID 862
Summary
CVE-2024-55991 is a critical vulnerability affecting the WP-CRM System, where missing authorization allows unauthorized access. This issue arises due to incorrectly configured access control security levels within WP-CRM. The WP-CRM System is impacted from an undisclosed version up to 3.2.9.1, making it essential for users to update their software as soon as possible to mitigate this risk. This vulnerability could potentially enable attackers to gain unauthorized access, leading to data breaches or system compromises.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.