CVE-2024-10579

CVSS V2 None CVSS V3 None
Description
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the preview_module() function in all versions up to, and including, 7.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view unpublished forms.
Overview
  • CVE ID
  • CVE-2024-10579
  • Assigner
  • Wordfence
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-11-26T11:04:31.503Z
  • Last Modified Date
  • 2024-11-26T14:09:22.368Z
History
Created Old Value New Value Data Type Notes
2024-11-27 13:11:19 Added to TrackCVE