Medium · 4.3 CVE-2024-4746 EUVD-2024-44343GHSA-jh5v-jf43-r2r2

WordPress Netgsm plugin <= 2.9.32 - Broken Access Control + CSRF vulnerability

Published Jun 10, 2024 · Updated May 12, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm: from n/a through <= 2.9.32.

Affected products

Vendor	Product	Affected	Fixed
netgsm	Netgsm	≤ 2.9.32	—

References

https://patchstack.com/database/Wordpress/Plugin/netgsm/vulnerability/wordpress-netgsm-plugin-2-9-16-broken-access-control-vulnerability?_s_id=cve vdb-entry