Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-1177
HistoryFeb 05, 2024 - 10:16 p.m.

Design/Logic Flaw

2024-02-0522:16:00
PRIOn knowledge base
www.prio-n.com
3
logic flaw
wordpress
data modification
capability check
unauthenticated attackers
permalink structure
nvd

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.7%

The WP Club Manager – WordPress Sports Club Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the settings_save() function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to update the permalink structure for the clubs

CPENameOperatorVersion
wp_club_managerlt2.2.11

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.7%

Related for PRION:CVE-2024-1177