cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-10003,https://securityvulnerability.io/vulnerability/CVE-2024-10003,Unauthorized Access to Plugin Options via Missing Capability Check,"The Rover IDX plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 3.0.0.2903. This makes it possible for authenticated attackers, with subscriber-level access and above, to add, modify, or delete plugin options.",Wordpress,Rover Idx,6.3,MEDIUM,0.0007399999885819852,false,,false,false,false,,false,false,2024-10-22T04:31:58.587Z,0
CVE-2024-10002,https://securityvulnerability.io/vulnerability/CVE-2024-10002,Authentication Bypass Vulnerability Affects Rover IDX Plugin for WordPress,"The Rover IDX plugin for WordPress is susceptible to an Authentication Bypass due to inadequate validation and capability checks in the 'rover_idx_refresh_social_callback' function. Attackers with subscriber-level permissions or higher can exploit this vulnerability to gain unauthorized administrative access. Although a partial patch is available in version 3.0.0.2905, users are strongly advised to upgrade to version 3.0.0.2906 to fully mitigate the risk. Ensuring the plugin is up to date is critical to maintaining the security of WordPress installations.",Wordpress,Rover Idx,8.8,HIGH,0.0006300000241026282,false,,false,false,false,,false,false,2024-10-22T04:31:57.893Z,0