CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-43962

Missing Authorization vulnerability in LWS LWS Affiliation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LWS Affiliation: from n/a through 2.3.4.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 40.3%

CVSS Severity

CVSS v3 Score 5.4

References

https://patchstack.com/database/vulnerability/lws-affiliation/wordpress-lws-affiliation-plugin-2-3-3-broken-access-control-vulnerability?_s_id=cve

Products affected by CVE-2024-43962

Lws » Affiliation » Version: N/A

cpe:2.3:a:lws:affiliation:-
Lws » Affiliation » Version: 0.1

cpe:2.3:a:lws:affiliation:0.1
Lws » Affiliation » Version: 1.0

cpe:2.3:a:lws:affiliation:1.0
Lws » Affiliation » Version: 1.1

cpe:2.3:a:lws:affiliation:1.1
Lws » Affiliation » Version: 2.0

cpe:2.3:a:lws:affiliation:2.0
Lws » Affiliation » Version: 2.0.1

cpe:2.3:a:lws:affiliation:2.0.1
Lws » Affiliation » Version: 2.1

cpe:2.3:a:lws:affiliation:2.1
Lws » Affiliation » Version: 2.2

cpe:2.3:a:lws:affiliation:2.2
Lws » Affiliation » Version: 2.2.5

cpe:2.3:a:lws:affiliation:2.2.5
Lws » Affiliation » Version: 2.2.6

cpe:2.3:a:lws:affiliation:2.2.6
Lws » Affiliation » Version: 2.3

cpe:2.3:a:lws:affiliation:2.3
Lws » Affiliation » Version: 2.3.2

cpe:2.3:a:lws:affiliation:2.3.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-43962

Products

Pricing

Contact Us