WordPress security by component
Boom Fest
Plugin description
Boom Fest is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 25, 2025; the highest published CVSS base score is 4.3.
Plugin slug:
boom-festLatest vulnerability
CVE-2024-13449: Boom Fest: A security weakness
Boom Fest is affected by a security weakness. Exploitation requires an authenticated subscriber account. The resulting impact depends on how the affected component exposes the vulnerable operation. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
| Safe version |
|
||
|---|---|---|---|
| Jan 25, 2025 |
CVE-2024-13449
Boom Fest: A security weakness
Boom Fest is affected by a security weakness. Exploitation requires an authenticated subscriber account. The resulting impact depends on how the affected component exposes the vulnerable operation. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
|
See mitigation notes |
CVE4.3
NVD4.3
|