CVE-2024-37952

HIGH 8.8CVE-2024-37952 · Published 09/07/2024 · updated 17/06/2026

In short

CVE-2024-37952 is a HIGH (CVSS 8.8) vulnerability affecting book your travel (themeenergy).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
book your travel themeenergy	`≤ 8.18.17`	No fix yet

Description

Improper Privilege Management vulnerability in themeenergy BookYourTravel allows Privilege Escalation.This issue affects BookYourTravel: from n/a through 8.18.17.

References

patchstack.com/database/vulnerability/bookyourtravel/wordpress-bookyourtravel-theme-8-18-17-subscriber-privilege-escalation-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free