CVE-2024-38690 — WordPress iPanorama 360 plugin <= 1.8.3 - Broken Access Control vulnerability

CVE-2024-38690

WordPress iPanorama 360 plugin <= 1.8.3 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.3.

Affected (CNA)

Vendor / product	Versions
Avirtum / iPanorama 360 WordPress Virtual Tour Builder	affected n/a through 1.8.3

CWE

CWE-862

References

https://patchstack.com/database/vulnerability/ipanorama-360-virtual-tour-builder-lite/wordpress-ipanorama-360-plugin-1-8-3-broken-access-control-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.