« Volver al listado

CVE-2024-33686

Estado: AplazadaMedia (4.3)—

Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend Themes Elevate WP, Extend Themes Brite, Extend Themes Colibri WP, Extend Themes Vertice.This issue affects Pathway: from n/a through 1.0.15; Hugo WP: from n/a through 1.0.8; Althea WP: from n/a through 1.0.13; Elevate WP: from n/a through 1.0.15; Brite: from n/a through 1.0.11; Colibri WP: from n/a through 1.0.94; Vertice: from n/a through 1.0.7.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Extendthemes — Althea WPAIExtendthemes — BriteAIExtendthemes — Colibri WPAIExtendthemes — Elevate WPAIExtendthemes — Hugo WPAIExtendthemes — PathwayAIExtendthemes — VerticeAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-33686",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-33686",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-29T11:22:18.391457Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "audit@patchstack.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "audit@patchstack.com",
      "affectedData": [
        {
          "vendor": "Extend Themes",
          "product": "Pathway",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "1.0.16",
                  "status": "unaffected"
                }
              ],
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.0.15"
            }
          ],
          "packageName": "pathway",
          "collectionURL": "https://wordpress.org/themes/",
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Extend Themes",
          "product": "Hugo WP",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "1.0.10",
                  "status": "unaffected"
                }
              ],
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.0.8"
            }
          ],
          "packageName": "hugo-wp",
          "collectionURL": "https://wordpress.org/themes/",
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Extend Themes",
          "product": "Althea WP",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "1.0.16",
                  "status": "unaffected"
                }
              ],
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.0.13"
            }
          ],
          "packageName": "althea-wp",
          "collectionURL": "https://wordpress.org/themes/",
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Extend Themes",
          "product": "Elevate WP",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "1.0.17",
                  "status": "unaffected"
                }
              ],
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.0.15"
            }
          ],
          "packageName": "elevate-wp",
          "collectionURL": "https://wordpress.org/themes/",
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Extend Themes",
          "product": "Brite",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "1.0.15",
                  "status": "unaffected"
                }
              ],
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.0.11"
            }
          ],
          "packageName": "brite",
          "collectionURL": "https://wordpress.org/themes/",
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Extend Themes",
          "product": "Colibri WP",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "1.0.99",
                  "status": "unaffected"
                }
              ],
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.0.94"
            }
          ],
          "packageName": "colibri-wp",
          "collectionURL": "https://wordpress.org/themes/",
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Extend Themes",
          "product": "Vertice",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "1.0.11",
                  "status": "unaffected"
                }
              ],
              "version": "n/a",
              "versionType": "custom",
              "lessThanOrEqual": "1.0.7"
            }
          ],
          "packageName": "vertice",
          "collectionURL": "https://wordpress.org/themes/",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-04-29T06:15:16.623",
  "references": [
    {
      "url": "https://patchstack.com/database/vulnerability/althea-wp/wordpress-althea-wp-theme-1-0-13-broken-access-control-vulnerability",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/brite/wordpress-brite-theme-1-0-11-broken-access-control-vulnerability",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/colibri-wp/wordpress-colibri-wp-theme-1-0-94-broken-access-control-vulnerability",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/elevate-wp/wordpress-elevate-wp-theme-1-0-15-broken-access-control-vulnerability",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/hugo-wp/wordpress-hugo-wp-theme-1-0-8-broken-access-control-vulnerability",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/pathway/wordpress-pathway-theme-1-0-15-cross-site-request-forgery-csrf-vulnerability",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/vertice/wordpress-vertice-theme-1-0-7-broken-access-control-vulnerability",
      "source": "audit@patchstack.com"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/althea-wp/wordpress-althea-wp-theme-1-0-13-broken-access-control-vulnerability",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/brite/wordpress-brite-theme-1-0-11-broken-access-control-vulnerability",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/colibri-wp/wordpress-colibri-wp-theme-1-0-94-broken-access-control-vulnerability",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/elevate-wp/wordpress-elevate-wp-theme-1-0-15-broken-access-control-vulnerability",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/hugo-wp/wordpress-hugo-wp-theme-1-0-8-broken-access-control-vulnerability",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/pathway/wordpress-pathway-theme-1-0-15-cross-site-request-forgery-csrf-vulnerability",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://patchstack.com/database/vulnerability/vertice/wordpress-vertice-theme-1-0-7-broken-access-control-vulnerability",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "audit@patchstack.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend Themes Elevate WP, Extend Themes Brite, Extend Themes Colibri WP, Extend Themes Vertice.This issue affects Pathway: from n/a through 1.0.15; Hugo WP: from n/a through 1.0.8; Althea WP: from n/a through 1.0.13; Elevate WP: from n/a through 1.0.15; Brite: from n/a through 1.0.11; Colibri WP: from n/a through 1.0.94; Vertice: from n/a through 1.0.7."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de autorización faltante en Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend Themes Elevate WP, Extend Themes Brite, Extend Themes Colibri WP, Extend Themes Vertice. Este problema afecta a Pathway: desde n/a hasta 1.0.15; Hugo WP: desde n/a hasta 1.0.8; Althea WP: desde n/a hasta 1.0.13; Elevar WP: desde n/a hasta 1.0.15; Brite: desde n/a hasta 1.0.11; Colibri WP: desde n/a hasta 1.0.94; Vertice: desde n/a hasta 1.0.7."
    }
  ],
  "lastModified": "2026-06-17T07:32:13.970",
  "sourceIdentifier": "audit@patchstack.com"
}