RULE(RULE ID:338539)

Rule General Information
Release Date: 2024-11-13
Rule Name: WordPress GRUN Costino Spendenformular Plugin Privilege Promotion Vulnerability (CVE-2024-50476)
Severity:
CVE ID:
Rule Protection Details
Description: Missing Authorization vulnerability in GRÜN Software Group GmbH GRÜN spendino Spendenformular allows Privilege Escalation.This issue affects GRÜN spendino Spendenformular: from n/a through 1.0.1.
Impact: >An attacker could exploit this vulnerability to elevate user rights in WordPress.
Affected OS: Windows, Linux, Others
Reference: https://patchstack.com/database/vulnerability/spendino/wordpress-gruen-spendino-spendenformular-plugin-1-0-1-arbitrary-option-update-to-privilege-escalation-vulnerability?_s_id=cve
Solutions
Please contact the software vendor to update the software patch.