CVE-2024-37952

ALTO 8.8CVE-2024-37952 · Published 09/07/2024 · updated 17/06/2026

In breve

CVE-2024-37952 è una vulnerabilità ALTO (CVSS 8.8) che riguarda book your travel (themeenergy).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.44%, superiore al 38.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
book your travel themeenergy	`≤ 8.18.17`	No fix yet

Description

Improper Privilege Management vulnerability in themeenergy BookYourTravel allows Privilege Escalation.This issue affects BookYourTravel: from n/a through 8.18.17.

References

patchstack.com/database/vulnerability/bookyourtravel/wordpress-bookyourtravel-theme-8-18-17-subscriber-privilege-escalation-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free