Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-13229

Опубликовано: 13 фев. 2025
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the update_metadata() function in all versions up to, and including, 1.0.235. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete any schema metadata assigned to any post.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:rankmath:seo:*:*:*:*:free:wordpress:*:*
Версия до 1.0.236 (исключая)

EPSS

Процентиль: 33%
0.00131
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-284
CWE-862

Связанные уязвимости

CVSS3: 4.3
github
12 месяцев назад

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the update_metadata() function in all versions up to, and including, 1.0.235. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete any schema metadata assigned to any post.

EPSS

Процентиль: 33%
0.00131
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-284
CWE-862