WordPress plugin
Rover IDX security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium1
- Low0
All Rover IDX vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Subscriber+) Authentication Bypass to Administrator ≤3.0.0.2905Update to 3.0.0.2906 | CVE-2024-10002 | |
| Medium6.3 | Authenticated (Subscriber+) Missing Authorization via Multiple Functions ≤3.0.0.2903Update to 3.0.0.2905 | CVE-2024-10003 |
- High8.8Authenticated (Subscriber+) Authentication Bypass to Administrator
≤3.0.0.2905Update to 3.0.0.2906
- Medium6.3Authenticated (Subscriber+) Missing Authorization via Multiple Functions
≤3.0.0.2903Update to 3.0.0.2905
Rover IDX: common questions
Does Rover IDX have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Rover IDX: 1 high, 1 medium. None are known to affect version null.
How do I check which version of Rover IDX I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Rover IDX vulnerability?
CVE-2024-10002, published Oct 21, 2024: Rover IDX <= 3.0.0.2905 - Authenticated (Subscriber+) Authentication Bypass to Administrator. Severity: High (CVSS 8.8).
Is any Rover IDX vulnerability listed in CISA KEV?
No. None of the known Rover IDX vulnerabilities is currently listed in the CISA KEV catalog.