CVE-2024-37496 — WordPress Metro Magazine theme <= 1.3.7 - Broken Access Control on Notice Dismissal vulnerability

CVE-2024-37496

WordPress Metro Magazine theme <= 1.3.7 - Broken Access Control on Notice Dismissal vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Metro Magazine: from n/a through 1.3.7.

Affected (CNA)

Vendor / product	Versions
Rara Themes / Metro Magazine	affected n/a through 1.3.7

CWE

CWE-862

References

https://patchstack.com/database/wordpress/theme/metro-magazine/vulnerability/wordpress-metro-magazine-theme-1-3-7-broken-access-control-on-notice-dismissal-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.