Vulnerabilities

TI-2024-09283 CVE-2024-10003 · GHSA-v247-w9mw-6x35

Rover IDX <= 3.0.0.2903 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions

LOW 28

The Rover IDX plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 3.0.0.2903.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00436 Published 2024-10-22 No fix listed CWE-862

TI-2024-09282 CVE-2024-10002 · GHSA-p25v-3q9m-p32x

Rover IDX <= 3.0.0.2905 - Authenticated (Subscriber+) Authentication Bypass to Administrator

MEDIUM 41

The Rover IDX plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0.0.2905.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00555 Published 2024-10-22 No fix listed CWE-288

Vulnerabilities

Filters

Rover IDX <= 3.0.0.2903 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions

Rover IDX <= 3.0.0.2905 - Authenticated (Subscriber+) Authentication Bypass to Administrator