PT-2024-33469 · WordPress · Wp Rest Api Fns

·

CVE-2024-49328

·

Published

2024-10-17

·

Updated

2025-01-11

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WP REST API FNS versions 1.0.0 and earlier
Description There is an Authentication Bypass Using an Alternate Path or Channel issue in WP REST API FNS, allowing users to bypass authentication. This lets users gain unauthorized access.
Recommendations For WP REST API FNS versions 1.0.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

LPE

Authentication Bypass Using an Alternate Path or Channel

Missing Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-49328

Affected Products

Wp Rest Api Fns