CVE-2024-50487
Authentication Bypass Using an Alternate Path or Channel (CWE-288)
Published: Oct 28, 2024 / Updated: 22d ago
010
CVSS 9.8EPSS 0.04%Critical
CVE info copied to clipboard
Authentication Bypass Using an Alternate Path or Channel vulnerability in MaanTheme MaanStore API allows Authentication Bypass.This issue affects MaanStore API: from n/a through 1.0.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
First Article
Feedly found the first article mentioning CVE-2024-50487. See article
Oct 28, 2024 at 11:58 AM / Vulners.com RSS Feed
CVE Assignment
NVD published the first details for CVE-2024-50487
Oct 28, 2024 at 12:15 PM
CVSS Estimate
Feedly estimated the CVSS score as HIGH
Oct 28, 2024 at 12:21 PM
EPSS
EPSS Score was set to: 0.04% (Percentile: 9.9%)
Oct 29, 2024 at 9:43 AM
Affected Systems
Maantheme/maanstore_api
+null more
Links to Mitre Att&cks
T1083: File and Directory Discovery
+null more
Attack Patterns
CAPEC-127: Directory Indexing
+null more
News
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 21, 2024 to October 27, 2024)
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week: WordPress Plugins with Reported Vulnerabilities Last Week
cveNotify : 🚨 CVE-2024-50487Authentication Bypass Using an Alternate Path or Channel vulnerability in MaanTheme MaanStore API allows Authentication Bypass.This issue affects MaanStore API: from n/a through 1.0.1.🎖@cveNotify
cveNotify : 🚨 CVE-2024-50487Authentication Bypass Using an Alternate Path or Channel vulnerability in MaanTheme MaanStore API allows Authentication Bypass.This issue affects MaanStore API: from n/a through 1.0.1.🎖@cveNotify
CVE-2024-50487
Critical Severity Description Authentication Bypass Using an Alternate Path or Channel vulnerability in MaanTheme MaanStore API allows Authentication Bypass.This issue affects MaanStore API: from n/a through 1.0.1. Read more at https://www.tenable.com/cve/CVE-2024-50487
NA - CVE-2024-50487 - Authentication Bypass Using an Alternate Path...
Authentication Bypass Using an Alternate Path or Channel vulnerability in MaanTheme MaanStore API allows Authentication Bypass.This issue affects MaanStore API: from n/a through 1.0.1.
CVE-2024-50487 | MaanTheme MaanStore API Plugin up to 1.0.1 on WordPress authentication bypass
A vulnerability classified as critical was found in MaanTheme MaanStore API Plugin up to 1.0.1 on WordPress. This vulnerability affects unknown code. The manipulation leads to authentication bypass using alternate channel. This vulnerability was named CVE-2024-50487 . The attack can be initiated remotely. There is no exploit available.
See 6 more articles and social media posts