CVE Feed

Dashboard / CVE / CVE-2024-33589

CVE-2024-33589

Missing Authorization vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.6.0.

Published:Apr 29, 2024

Last Modified:Apr 28, 2026

EPS:Apr 29, 2024

EPSS Score:0.00459

CVSS Score:6.5

Affected Products

Vendor

Product

Action

Vendor

Logon

Product

Kb Support

Logon

Kb Support

Exploits

No exploit reference

Common Weakness Enumeration

CWE-862 Missing Authorization

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-665 Exploitation of Thunderbolt Protection Flaws

Related CVEs

CVE-2025-24741 (CVSS 4.7) — URL Redirection to Untrusted Site ('Open Redirect') vulnerability in LOGON KB Support kb-support.This issue af…

CVE-2024-8632 (CVSS 6.5) — The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized acc…

CVE-2024-8548 (CVSS 8.1) — The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized mod…

CVE-2023-37890 (CVSS 4.3) — Missing Authorization vulnerability in WPOmnia KB Support – WordPress Help Desk and Knowledge Base allows Acce…

CVE-2023-25983 (CVSS 8.8) — Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affec…

References

https://patchstack.com/database/vulnerability/kb-support/wordpress-kb-support-plugin-1-6-0-broken-access-control-vulnerability?_s_id=cve

https://patchstack.com/database/vulnerability/kb-support/wordpress-kb-support-plugin-1-6-0-broken-access-control-vulnerability?_s_id=cve

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High