WordPress Music Player for Elementor CVE-2024-10582 Missing Authorization Vulnerability

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability Name: Music Player for Elementor - Audio Player & Podcast Player <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import 2. Vulnerability Type: Missing Authorization 3. CVSS Score: 3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 4. CVE ID: CVE-2024-10582 5. CVSS Rating Level: 4.3 (Medium) 6. Public Release Date: November 14, 2024 7. Last Updated Date: November 15, 2024 8. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 9. Affected Versions: <= 2.4.1 10. Fixed Version: 2.4.2 11. Vulnerability Description: The plugin lacks proper authorization checks in the function, allowing attackers with Subscriber or higher privileges to import templates without authorization. 12. Remediation Recommendation: Upgrade to version 2.4.2 or later. 13. Reference Link: plugins.trac.wordpress.org 14. Vulnerability Database: Wordfence Intelligence Vulnerability Database 15. Vulnerability Rating: 4.3 (Medium) 16. Public Release Date: November 14, 2024 17. Last Updated Date: November 15, 2024 18. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 19. Affected Versions: <= 2.4.1 20. Fixed Version: 2.4.2 21. Vulnerability Description: The plugin lacks proper authorization checks in the function, allowing attackers with Subscriber or higher privileges to import templates without authorization. 22. Remediation Recommendation: Upgrade to version 2.4.2 or later. 23. Reference Link: plugins.trac.wordpress.org 24. Vulnerability Database: Wordfence Intelligence Vulnerability Database 25. Vulnerability Rating: 4.3 (Medium) 26. Public Release Date: November 14, 2024 27. Last Updated Date: November 15, 2024 28. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 29. Affected Versions: <= 2.4.1 30. Fixed Version: 2.4.2 31. Vulnerability Description: The plugin lacks proper authorization checks in the function, allowing attackers with Subscriber or higher privileges to import templates without authorization. 32. Remediation Recommendation: Upgrade to version 2.4.2 or later. 33. Reference Link: plugins.trac.wordpress.org 34. Vulnerability Database: Wordfence Intelligence Vulnerability Database 35. Vulnerability Rating: 4.3 (Medium) 36. Public Release Date: November 14, 2024 37. Last Updated Date: November 15, 2024 38. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 39. Affected Versions: <= 2.4.1 40. Fixed Version: 2.4.2 41. Vulnerability Description: The plugin lacks proper authorization checks in the function, allowing attackers with Subscriber or higher privileges to import templates without authorization. 42. Remediation Recommendation: Upgrade to version 2.4.2 or later. 43. Reference Link: plugins.trac.wordpress.org 44. Vulnerability Database: Wordfence Intelligence Vulnerability Database 45. Vulnerability Rating: 4.3 (Medium) 46. Public Release Date: November 14, 2024 47. Last Updated Date: November 15, 2024 48. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 49. Affected Versions: <= 2.4.1 50. Fixed Version: 2.4.2 51. Vulnerability Description: The plugin lacks proper authorization checks in the function, allowing attackers with Subscriber or higher privileges to import templates without authorization. 52. Remediation Recommendation: Upgrade to version 2.4.2 or later. 53. Reference Link: plugins.trac.wordpress.org 54. Vulnerability Database: Wordfence Intelligence Vulnerability Database 55. Vulnerability Rating: 4.3 (Medium) 56. Public Release Date: November 14, 2024 57. Last Updated Date: November 15, 2024 58. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 59. Affected Versions: <= 2.4.1 60. Fixed Version: 2.4.2 61. Vulnerability Description: The plugin lacks proper authorization checks in the function, allowing attackers with Subscriber or higher privileges to import templates without authorization. 62. Remediation Recommendation: Upgrade to version 2.4.2 or later. 63. Reference Link: plugins.trac.wordpress.org 64. Vulnerability Database: Wordfence Intelligence Vulnerability Database 65. Vulnerability Rating: 4.3 (Medium) 66. Public Release Date: November 14, 2024 67. Last Updated Date: November 15, 2024 68. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 69. Affected Versions: <= 2.4.1 70. Fixed Version: 2.4.2 71. Vulnerability Description: The plugin lacks proper authorization checks in the function, allowing attackers with Subscriber or higher privileges to import templates without authorization. 72. Remediation Recommendation: Upgrade to version 2.4.2 or later. 73. Reference Link: plugins.trac.wordpress.org 74. Vulnerability Database: Wordfence Intelligence Vulnerability Database 75. Vulnerability Rating: 4.3 (Medium) 76. Public Release Date: November 14, 2024 77. Last Updated Date: November 15, 2024 78. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 79. Affected Versions: <= 2.4.1 80. Fixed Version: 2.4.2 81. Vulnerability Description: The plugin

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Music Player for Elementor CVE-2024-10582 Missing Authorization Vulnerability

More from this source