CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-38690 – WordPress iPanorama 360 plugin <= 1.8.3 - Broken Access Control vulnerability
https://notcve.org/view.php?id=CVE-2024-38690
10 Jul 2024 — Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.3. The iPanorama 360 WordPress Virtual Tour Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the do_parse_request() function in versions up to, and including, 1.8.3. This makes it possible for unauthenticated... • https://patchstack.com/database/vulnerability/ipanorama-360-virtual-tour-builder-lite/wordpress-ipanorama-360-plugin-1-8-3-broken-access-control-vulnerability?_s_id=cve • CWE-862: Missing Authorization •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-33941 – WordPress iPanorama 360 plugin <= 1.8.1 - Broken Access Control vulnerability
https://notcve.org/view.php?id=CVE-2024-33941
30 Apr 2024 — Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.1. Vulnerabilidad de autorización faltante en Avirtum iPanorama 360 WordPress Virtual Tour Builder. Este problema afecta a iPanorama 360 WordPress Virtual Tour Builder: desde n/a hasta 1.8.1. The iPanorama 360 WordPress Virtual Tour Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability... • https://patchstack.com/database/vulnerability/ipanorama-360-virtual-tour-builder-lite/wordpress-ipanorama-360-plugin-1-8-1-broken-access-control-vulnerability?_s_id=cve • CWE-862: Missing Authorization •