🔐 CVE Alert

CVE-2024-44052

UNKNOWN 0.0

WordPress HelloAsso plugin <= 1.1.10 - Broken Access Control vulnerability

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Missing Authorization vulnerability in HelloAsso HelloAsso helloasso.This issue affects HelloAsso: from n/a through <= 1.1.10.

CWE CWE-862
Vendor helloasso
Product helloasso
Published Nov 1, 2024
Last Updated Apr 1, 2026
Stay Ahead of the Next One

Get instant alerts for helloasso helloasso

Be the first to know when new unknown vulnerabilities affecting helloasso helloasso are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

HelloAsso / HelloAsso
0 ≤ 1.1.10

References

NVD ↗ CVE.org ↗ EPSS Data ↗
patchstack.com: https://patchstack.com/database/Wordpress/Plugin/helloasso/vulnerability/wordpress-helloasso-plugin-1-1-10-broken-access-control-vulnerability?_s_id=cve

Credits

Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program