Lucene search
PRIOn knowledge basePRION:CVE-2024-1092HistoryFeb 05, 2024 - 10:16 p.m.
Design/Logic Flaw
2024-02-0522:16:00
PRIOn knowledge base
www.prio-n.com
4
rss aggregator
wordpress
vulnerability
missing capability check
unauthorized data modification
authenticated attackers
contributor access
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the feedzy dashboard in all versions up to, and including, 4.4.1. This makes it possible for authenticated attackers, with contributor access or higher, to create, edit or delete feed categories created by them.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rss_aggregator_by_feedzy | le | 4.4.1 |
Related
cve
cve
CVE-2024-1092
2024-02-05 22:16:07
cvelist
cvelist
CVE-2024-1092
2024-02-05 21:21:53
nvd
nvd
CVE-2024-1092
2024-02-05 22:16:07
wpvulndb
wpvulndb
wordfence
wordfence