CVE-2024-50459

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50459
Missing Authorization vulnerability in Hossni Mubarak AidWP wp-stripe-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AidWP: from n/a through <= 3.2.3.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://patchstack.com/database/Wordpress/Plugin/wp-stripe-donation/vulnerability/wordpress-aidwp-plugin-3-2-3-broken-access-control-vulnerability?_s_id=cve
Configurations

Configuration 1 (hide)

cpe:2.3:a:hmplugin:aidwp:*:*:*:*:*:wordpress:*:*
History

01 Apr 2026, 16:19

Type Values Removed Values Added
Summary (en) Missing Authorization vulnerability in HM Plugin WordPress Stripe Donation and Payment Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Stripe Donation and Payment Plugin: from n/a through 3.2.3. (en) Missing Authorization vulnerability in Hossni Mubarak AidWP wp-stripe-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AidWP: from n/a through <= 3.2.3.
References
  • {'url': 'https://patchstack.com/database/vulnerability/wp-stripe-donation/wordpress-aidwp-plugin-3-2-3-broken-access-control-vulnerability?_s_id=cve', 'tags': ['Third Party Advisory'], 'source': 'audit@patchstack.com'}
  • () https://patchstack.com/database/Wordpress/Plugin/wp-stripe-donation/vulnerability/wordpress-aidwp-plugin-3-2-3-broken-access-control-vulnerability?_s_id=cve -

06 Nov 2024, 23:11

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.3 		v2 : unknown
v3 : 9.8
References () https://patchstack.com/database/vulnerability/wp-stripe-donation/wordpress-aidwp-plugin-3-2-3-broken-access-control-vulnerability?_s_id=cve - () https://patchstack.com/database/vulnerability/wp-stripe-donation/wordpress-aidwp-plugin-3-2-3-broken-access-control-vulnerability?_s_id=cve - Third Party Advisory
First Time Hmplugin aidwp
Hmplugin
CPE cpe:2.3:a:hmplugin:aidwp:*:*:*:*:*:wordpress:*:*

01 Nov 2024, 12:57

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de autorización faltante en el complemento HM de WordPress Stripe Donation and Payment Plugin permite explotar los niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta al complemento HM de WordPress Stripe Donation and Payment Plugin: desde n/a hasta 3.2.3.

29 Oct 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-29 17:15

Updated : 2026-04-01 16:19

NVD link : CVE-2024-50459

Mitre link : CVE-2024-50459

CVE.ORG link : CVE-2024-50459

JSON object : View

Products Affected

hmplugin

  • aidwp
CWE
CWE-862

Missing Authorization