Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-2538

Опубликовано: 20 мар. 2024
Источник: nvd
CVSS3: 5.4
CVSS3: 4.3
EPSS Низкий

Описание

The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_save_permalink' function in all versions up to, and including, 2.4.3.1. This makes it possible for authenticated attackers, with author access and above, to modify the permalinks of arbitrary posts.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:permalink_manager_lite_project:permalink_manager_lite:*:*:*:*:*:wordpress:*:*
Версия до 2.4.3.2 (исключая)

EPSS

Процентиль: 17%
0.00053
Низкий

5.4 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

github логотип

GHSA-597f-xh85-qc2h

CVSS3: 5.4
github
почти 2 года назад

The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_save_permalink' function in all versions up to, and including, 2.4.3.1. This makes it possible for authenticated attackers, with author access and above, to modify the permalinks of arbitrary posts.

EPSS

Процентиль: 17%
0.00053
Низкий

5.4 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-862