CVE-2023-41870

ALTO 8.8CVE-2023-41870 · Published 13/12/2024 · updated 17/06/2026

In breve

CVE-2023-41870 è una vulnerabilità ALTO (CVSS 8.8) che riguarda wp crowdfunding (themeum).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.83%, superiore al 57.7% delle vulnerabilità.
Correzione: aggiornare a 2.1.6 o successiva.

Package	Affected versions	Patched versions
wp crowdfunding themeum	`< 2.1.6`	`2.1.6`

Description

Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.5.

References

patchstack.com/database/wordpress/plugin/wp-crowdfunding/vulnerability/wordpress-wp-crowdfunding-plugin-2-1-5-broken-access-control-vulnerability · Third Party Advisory

Altre vulnerabilità di wp crowdfunding

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wp crowdfunding

themeum

< 2.1.6

2.1.6

Altre vulnerabilità di wp crowdfunding

Vedi tutto →