CVE-2024-33941: CWE-862 Missing Authorization in Avirtum iPanorama 360 WordPress Virtual Tour Builder
CVE-2024-33941 is a medium severity vulnerability in the Avirtum iPanorama 360 WordPress Virtual Tour Builder plugin. It involves missing authorization controls, allowing unauthorized access to certain functionality or data. The issue affects versions up to 1. 8. 1. There is no official patch or remediation guidance currently available from the vendor. The vulnerability has a CVSS score of 5. 3, indicating a moderate impact primarily on confidentiality. No known exploits are reported in the wild at this time.
AI Analysis
Technical Summary
This vulnerability (CVE-2024-33941) is classified as CWE-862 (Missing Authorization) in the iPanorama 360 WordPress Virtual Tour Builder plugin by Avirtum. It affects all versions up to 1.8.1 and allows unauthorized users to access functionality or data that should require authorization. The CVSS 3.1 base score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No official patch or vendor advisory is currently available, and no known exploits have been reported.
Potential Impact
The vulnerability allows unauthorized access to certain features or data within the affected plugin, potentially leading to limited confidentiality loss. There is no impact on integrity or availability reported. Since no exploits are known in the wild, the immediate risk appears moderate but could increase if exploitation techniques emerge.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin's administrative interfaces and monitor for updates from Avirtum. No official mitigation or temporary fix is currently documented.
CVE-2024-33941: CWE-862 Missing Authorization in Avirtum iPanorama 360 WordPress Virtual Tour Builder
Description
CVE-2024-33941 is a medium severity vulnerability in the Avirtum iPanorama 360 WordPress Virtual Tour Builder plugin. It involves missing authorization controls, allowing unauthorized access to certain functionality or data. The issue affects versions up to 1. 8. 1. There is no official patch or remediation guidance currently available from the vendor. The vulnerability has a CVSS score of 5. 3, indicating a moderate impact primarily on confidentiality. No known exploits are reported in the wild at this time.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2024-33941) is classified as CWE-862 (Missing Authorization) in the iPanorama 360 WordPress Virtual Tour Builder plugin by Avirtum. It affects all versions up to 1.8.1 and allows unauthorized users to access functionality or data that should require authorization. The CVSS 3.1 base score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No official patch or vendor advisory is currently available, and no known exploits have been reported.
Potential Impact
The vulnerability allows unauthorized access to certain features or data within the affected plugin, potentially leading to limited confidentiality loss. There is no impact on integrity or availability reported. Since no exploits are known in the wild, the immediate risk appears moderate but could increase if exploitation techniques emerge.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin's administrative interfaces and monitor for updates from Avirtum. No official mitigation or temporary fix is currently documented.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Patchstack
- Date Reserved
- 2024-04-29T08:10:25.154Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69f16559cbff5d86104ad227
Added to database: 4/29/2026, 1:56:41 AM
Last enriched: 4/29/2026, 3:06:06 AM
Last updated: 4/29/2026, 6:05:59 AM
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.