Lucene search
PRIOn knowledge basePRION:CVE-2024-0596HistoryFeb 10, 2024 - 7:15 a.m.
Design/Logic Flaw
2024-02-1007:15:00
PRIOn knowledge base
www.prio-n.com
6
design/logic flaw
wordpress
vulnerability
unauthorized access
data
capability check
authenticated attackers
subscriber-level access
The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the editor_html() function in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to view password protected and draft posts.
| CPE | Name | Operator | Version |
|---|---|---|---|
| awesome_support | lt | 6.1.8 |
Related
cvelist
cvelist
vulnrichment
vulnrichment
wpvulndb
wpvulndb
cve
cve
CVE-2024-0596
2024-02-10 07:15:08
nvd
nvd
CVE-2024-0596
2024-02-10 07:15:08
wordfence
wordfence