CVE Database /
CVE-2024-3828
CVE · High
CVE-2024-3828 — Spectra Pro [spectra-pro] < 1.1.6
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-3828
|
Spectra Pro [spectra-pro] < 1.1.6 |
Improper Privilege Management |
High
8.8
|
< 1.1.6
|
1.1.6 |
2024-05-09 |
—
|
CVE-2024-3828
The Spectra Pro plugin before version 1.1.6 contains a privilege escalation flaw that permits authenticated users with author privileges or higher to create registration forms and designate new accounts as administrators. This vulnerability allows attackers to establish additional administrator accounts, thereby granting themselves elevated permissions within the WordPress site.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings