Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2024-37463: CRM Perks Forms: Unauthorized Access to Certain Features
CVE-2024-37463 · published 2 years ago
Summary
A security issue in CRM Perks Forms allows unauthorized users to access features that should be restricted. This affects all versions of CRM Perks Forms from the initial release up to 1.1.5. To stay secure, update to the latest version of CRM Perks Forms.
What to do
- Update crmperks crm_perks_forms to version 1.1.6 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| crmperks | crm_perks_forms |
< 1.1.6 cpe:2.3:a:crmperks:crm_perks_forms:*:*:*:*:*:wordpress:*:* |
Original advisory text
Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.
Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.
References
- https://patchstack.com/database/vulnerability/crm-perks-forms/wordpress-crm-perk... Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-862Missing Authorization
Timeline
Published1 Nov 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-37463 · NVD
Track software like this
Free during beta