WordPress Koko AI Page Builder Unauthenticated Redirect Vulnerability (CVE-2024-3188-3203) Advisory

Vulnerability Overview Vulnerability Name: Koko AI Page Builder <= 2.9.3 - Unauthorized Redirection Leading to User Session Hijacking (No Authentication Bypass) Vulnerability Type: Unauthorized Redirection Impact: User Session Hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Last Updated: 2024-07-10 Affected Scope Affected Versions: Koko AI Page Builder <= 2.9.3 Affected Component: WordPress Affected Plugin: Koko AI Page Builder Remediation Fix Status: Fixed Fixed Version: 2.9.4 Fix Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3188 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3189 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3190 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3191 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3192 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3193 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3194 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3195 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3196 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3197 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3198 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3199 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3200 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3201 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3202 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3203 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3204 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3205 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3206 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3207 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3208 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3209 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3210 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3211 Vulnerability Description: Unauthorized redirection leading to user session hijacking CVSS Score: 7.5 Release Date: 2024-07-10 Related Vulnerabilities Vulnerability ID: CVE-2024-3212 Vulnerability Description: Unauthorized redir

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Koko AI Page Builder Unauthenticated Redirect Vulnerability (CVE-2024-3188-3203) Advisory

More from this source