CVE Database /
CVE-2024-10533
CVE · Medium
CVE-2024-10533 — WP Chat App [wp-whatsapp] < 3.6.9
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-10533
|
WP Chat App [wp-whatsapp] < 3.6.9 |
Missing Authorization |
Medium
4.3
|
< 3.6.9
|
3.6.9 |
2024-11-15 |
—
|
CVE-2024-10533
The WP Chat App plugin for WordPress contains a vulnerability in its ajax_install_plugin() function that fails to properly verify user capabilities before allowing plugin installation. This flaw affects versions 3.6.8 and earlier, and allows any authenticated user with Subscriber privileges or higher to install the filebird plugin without proper authorization.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings