CVE-2024-49328
Authentication Bypass Using an Alternate Path or Channel vulnerability in Vivek Tamrakar WP REST API FNS allows Authentication Bypass.This issue affects WP REST API FNS: from n/a through 1.0.0.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 1.49%
- CWE
- CWE-288, CWE-288
- Published
- 2024-10-20
- Last modified
- 2026-04-23
Affected products
- Vivek Tamrakar WP REST API FNS
- vivek2tamrakar WP REST API FNS
Weakness type
Related vulnerabilities
- CVE-2026-88260 — Authentication bypass using an alternate path or channel and Improper validation of syntactic...
- CVE-2026-81906 — [UNREVIEWED] OAuth Callback Login Bypasses Deactivated-Account Checks
- CVE-2026-81796 — WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability
- CVE-2026-81787 — WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerability
- CVE-2026-81783 — WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability
- CVE-2026-88861 — Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization
- CVE-2026-86084 — n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
- CVE-2026-83527 — An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a...