high7.6

CVE-2024-34800

Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorrectly Configured Access Control Securit…

Impact

Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crafthemes Demo Import: from n/a through <= 3.3.

Affected products

Product	Affected versions
Crafthemes Demo Import: From N/A Through	through 3.3.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-862

References

NVD record
CVE.org record
https://patchstack.com/database/Wordpress/Plugin/crafthemes-demo-import/vulnerability/wordpress-crafthemes-demo-import-plugin-3-1-arbitrary-plugin-installation-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/crafthemes-demo-import/wordpress-crafthemes-demo-import-plugin-3-1-arbitrary-plugin-installation-vulnerability?_s_id=cve