What’s Vulnerable › Vulnerabilities

CVE-2024-2231: Himer - Social Questions and Answers < 2.1.1 - Subscriber+ Private Group Joining via IDOR

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-03 · updated 2026-06-17
• Weakness: CWE-863

Description

The allows any authenticated user to join a private group due to a missing authorization check on a function

Affected products

• Himer: before 2.1.1 — fixed in 2.1.1

How to fix

Upgrade to a fixed version: Himer 2.1.1. Check the vendor advisory for mitigations.

References

• https://wpscan.com/vulnerability/119d2d93-3b71-4ce9-b385-4e6f57b162cb/
• https://wpscan.com/vulnerability/119d2d93-3b71-4ce9-b385-4e6f57b162cb/

Get alerted when CVE-2024-2231 or the next vulnerability affects your stack