🔐 CVE Alert

CVE-2024-10003

MEDIUM 6.3

Rover IDX <= 3.0.0.2903 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions

CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th

The Rover IDX plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 3.0.0.2903. This makes it possible for authenticated attackers, with subscriber-level access and above, to add, modify, or delete plugin options.

CWE CWE-862
Vendor stevemullen
Product rover idx
Published Oct 22, 2024
Last Updated Apr 8, 2026
Stay Ahead of the Next One

Get instant alerts for stevemullen rover idx

Be the first to know when new medium vulnerabilities affecting stevemullen rover idx are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

stevemullen / Rover IDX
0 ≤ 3.0.0.2903

References

NVD ↗ CVE.org ↗ EPSS Data ↗
wordfence.com: https://www.wordfence.com/threat-intel/vulnerabilities/id/cdf67099-5514-45ba-9a4c-10af984bf593?source=cve plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/rover-idx/tags/3.0.0.2903/admin/rover-panel-setup.php#L76 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/rover-idx/tags/3.0.0.2903/admin/rover-panel-setup.php#L120 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/rover-idx/tags/3.0.0.2903/admin/rover-panel-setup.php#L152 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/rover-idx/tags/3.0.0.2903/admin/rover-panel-setup.php#L199 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/rover-idx/tags/3.0.0.2903/admin/rover-panel-setup.php#L225 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/rover-idx/tags/3.0.0.2903/admin/rover-panel-setup.php#L240 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/rover-idx/tags/3.0.0.2903/admin/rover-panel-setup.php#L270 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/changeset/3171681/rover-idx

Credits

István Márton