CVE-2024-4355

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the stopbadbots_get_ajax_data() function in all versions up to, and including, 10.23. This makes it possible for authenticated attackers, with subscriber-level access and above, to expose visitor data.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
May 30, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-435507.4Windows Secure Channel Spoofing VulnerabilityCVE-2024-435517.8Windows Storage Elevation of Privilege VulnerabilityCVE-2024-435527.3Windows Shell Remote Code Execution VulnerabilityCVE-2024-435537.0NT OS Kernel Elevation of Privilege VulnerabilityCVE-2024-435545.5Windows Kernel-Mode Driver Information Disclosure VulnerabilityCVE-2024-435556.5Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-435567.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2024-435576.5Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-435586.5Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-435596.5Windows Mobile Broadband Driver Denial of Service VulnerabilityCVE-2024-43566.4The List categories plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'categories' shortcode in all versionCVE-2024-435607.8Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
CVE-2024-4355: Medium severity, CVSS 4.3 | Vulnix