CVE-2024-9187

🗓️ 12 Oct 2024 05:39:39Reported by WordfenceType

The WordPress 'Read more By Adam' plugin allows unauthorized data loss

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-9187	12 Oct 202408:37	–	circl
Cvelist	CVE-2024-9187 Read more By Adam <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Read More Button Deletion	12 Oct 202405:39	–	cvelist
EUVD	EUVD-2024-49778	3 Oct 202520:07	–	euvd
NVD	CVE-2024-9187	12 Oct 202406:15	–	nvd
Patchstack	WordPress Read more By Adam plugin <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Read More Button Deletion vulnerability	14 Oct 202400:26	–	patchstack
Patchstack	WordPress Read more By Adam Plugin <= 1.1.8 is vulnerable to Broken Access Control	14 Oct 202400:00	–	patchstack
Positive Technologies	PT-2024-39477 · WordPress · Read More By Adam	12 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-9187	23 May 202510:44	–	redhatcve
Vulnrichment	CVE-2024-9187 Read more By Adam <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Read More Button Deletion	12 Oct 202405:39	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 7, 2024 to October 13, 2024)	17 Oct 202415:27	–	wordfence

Vulners

Node

adamskaat read_more_by_adamRange≤1.1.8wordpress

[
  {
    "vendor": "adamskaat",
    "product": "Read more By Adam",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.8",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/4ebc8d0d-04b6-49a0-96c1-7c6d930009d8
plugins	www.plugins.trac.wordpress.org/browser/read-more/trunk/files/RadMoreAjax.php

15 Apr 2026 00:35Current

4.7Medium risk

Vulners AI Score4.7

CVSS 3.14.3

EPSS0.00133

SSVC

CWE-862