WordPress Music Player for Elementor CVE-2024-10582 Missing Authorization Vulnerability

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Music Player for Elementor - Audio Player & Podcast Player <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import 2. Vulnerability Type: Missing Authorization 3. CVSS Score: 3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 4. CVE ID: CVE-2024-10582 5. CVSS Score Rating: 4.3 (Medium) 6. Public Release Date: November 14, 2024 7. Last Updated Date: November 15, 2024 8. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 9. Affected Versions: <= 2.4.1 10. Fixed Version: 2.4.2 11. Vulnerability Description: The plugin lacks an authorization check for unauthorized data modification in the import_mpfe_template() function, allowing attackers with Subscriber-level permissions and above to import templates. 12. Remediation Advice: Update to the fixed version 2.4.2 or higher. 13. Reference Link: plugins.trac.wordpress.org 14. Vulnerability Database: Wordfence Intelligence Vulnerability Database 15. Vulnerability Score: 4.3 (Medium) 16. Public Release Date: November 14, 2024 17. Last Updated Date: November 15, 2024 18. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 19. Affected Versions: <= 2.4.1 20. Fixed Version: 2.4.2 21. Vulnerability Description: The plugin lacks an authorization check for unauthorized data modification in the import_mpfe_template() function, allowing attackers with Subscriber-level permissions and above to import templates. 22. Remediation Advice: Update to the fixed version 2.4.2 or higher. 23. Reference Link: plugins.trac.wordpress.org 24. Vulnerability Database: Wordfence Intelligence Vulnerability Database 25. Vulnerability Score: 4.3 (Medium) 26. Public Release Date: November 14, 2024 27. Last Updated Date: November 15, 2024 28. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 29. Affected Versions: <= 2.4.1 30. Fixed Version: 2.4.2 31. Vulnerability Description: The plugin lacks an authorization check for unauthorized data modification in the import_mpfe_template() function, allowing attackers with Subscriber-level permissions and above to import templates. 32. Remediation Advice: Update to the fixed version 2.4.2 or higher. 33. Reference Link: plugins.trac.wordpress.org 34. Vulnerability Database: Wordfence Intelligence Vulnerability Database 35. Vulnerability Score: 4.3 (Medium) 36. Public Release Date: November 14, 2024 37. Last Updated Date: November 15, 2024 38. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 39. Affected Versions: <= 2.4.1 40. Fixed Version: 2.4.2 41. Vulnerability Description: The plugin lacks an authorization check for unauthorized data modification in the import_mpfe_template() function, allowing attackers with Subscriber-level permissions and above to import templates. 42. Remediation Advice: Update to the fixed version 2.4.2 or higher. 43. Reference Link: plugins.trac.wordpress.org 44. Vulnerability Database: Wordfence Intelligence Vulnerability Database 45. Vulnerability Score: 4.3 (Medium) 46. Public Release Date: November 14, 2024 47. Last Updated Date: November 15, 2024 48. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 49. Affected Versions: <= 2.4.1 50. Fixed Version: 2.4.2 51. Vulnerability Description: The plugin lacks an authorization check for unauthorized data modification in the import_mpfe_template() function, allowing attackers with Subscriber-level permissions and above to import templates. 52. Remediation Advice: Update to the fixed version 2.4.2 or higher. 53. Reference Link: plugins.trac.wordpress.org 54. Vulnerability Database: Wordfence Intelligence Vulnerability Database 55. Vulnerability Score: 4.3 (Medium) 56. Public Release Date: November 14, 2024 57. Last Updated Date: November 15, 2024 58. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 59. Affected Versions: <= 2.4.1 60. Fixed Version: 2.4.2 61. Vulnerability Description: The plugin lacks an authorization check for unauthorized data modification in the import_mpfe_template() function, allowing attackers with Subscriber-level permissions and above to import templates. 62. Remediation Advice: Update to the fixed version 2.4.2 or higher. 63. Reference Link: plugins.trac.wordpress.org 64. Vulnerability Database: Wordfence Intelligence Vulnerability Database 65. Vulnerability Score: 4.3 (Medium) 66. Public Release Date: November 14, 2024 67. Last Updated Date: November 15, 2024 68. Researcher: Tieu Pham Trong Nhan - TechlabCorp incognito 69. Affected Versions: <= 2.4.1 70. Fixed Version: 2.4.2 71. Vulnerability Description: The plugin lacks an authorization check for unauthorized data modification in the import_mpfe_template() function, allowing attackers with Subscriber-level permissions and above to import templates. 72. Remediation Advice: Update to the fixed version 2.4.2 or higher. 73. Reference Link: plugins.trac.wordpress.org 74. Vulnerability Database: Wordfence Intelligence Vulnerability Databas

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Music Player for Elementor CVE-2024-10582 Missing Authorization Vulnerability