← CVE Intelligence

CVE-2024-5331

Breakdance <= 1.7.2 - Missing Authorization PUBLISHED

Description (CNA)

The Breakdance plugin for WordPress is vulnerable to unauthorized access of data in all versions up to, and including, 1.7.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to export form submissions.

Affected (CNA)

Vendor / productVersions
Breakdance / Breakdanceaffected 0 through 1.7.1

CWE

CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.