CVE-2024-6590

The Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 3.8.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit post status, edit Google sheet integrations, and create Google sheet integrations.

• CWE-862

• https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php#L1168Product
• https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php#L812Product
• https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php#L863Product
• https://plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php#L935Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/d35ff2cc-9af2-4b72-bc49-e205275daa4d?source=cveThird Party Advisory

Published

Sep 25, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6584The 'wp_ajax_boost_proxy_ig' action allows administrators to…9.1
• CVE-2024-6585Multiple stored cross-site scripting (“XSS”) vulnerabilities…5.4
• CVE-2024-6586Lightdash version 0.1024.6 allows users with the necessary p…7.3
• CVE-2024-6587A Server-Side Request Forgery (SSRF) vulnerability exists in…7.5
• CVE-2024-6588The PowerPress Podcasting plugin by Blubrry plugin for WordP…6.4
• CVE-2024-6589The LearnPress – WordPress LMS Plugin plugin for WordPress i…8.8
• CVE-2024-6591The Ultimate WordPress Auction Plugin plugin for WordPress i…5.8
• CVE-2024-6592An incorrect authorization vulnerability in the protocol com…9.1
• CVE-2024-6593Incorrect Authorization vulnerability in WatchGuard Authenti…9.1
• CVE-2024-6594Improper Handling of Exceptional Conditions vulnerability in…7.5
• CVE-2024-6595An issue was discovered in GitLab CE/EE affecting all versio…5.3
• CVE-2024-6596An unauthenticated remote attacker can run malicious c# code…9.8