Medium · 5.3 CVE-2024-38743 EUVD-2024-37591GHSA-fv65-j2g7-x89x

WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Access Control vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows .

This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0.

Vendor	Product	Affected	Fixed
Upqode	Plum: Spin Wheel & Email Pop-up	≤ 2.0	—