CVE-2024-1649

creationtimestamp| type| source ---|---|--- 2024-02-27 12:31:54+00:00| seen| https://t.me/ctinow/194303 2024-02-27 12:32:05+00:00| seen| https://t.me/ctinow/194314 2024-03-14 12:21:35+00:00| seen| https://t.me/ctinow/207662...

CVE-2024-1649

The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxDeleteCategory function in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and...