Lucene search
PatchstackCVELIST:CVE-2024-33558HistoryApr 29, 2024 - 8:15 a.m.
CVE-2024-33558 WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability
2024-04-2908:15:18
CWE-862
Patchstack
www.cve.org
1
wordpress
xstore core
limited arbitrary file download
missing authorization
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
9.0%
Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "XStore Core",
"vendor": "8theme",
"versions": [
{
"lessThanOrEqual": "5.3.5",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2024-33558
2024-04-29 09:15:07
wpvulndb
wpvulndb
cve
cve
CVE-2024-33558
2024-04-29 09:15:07
wordfence
wordfence
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
9.0%
Related for CVELIST:CVE-2024-33558