CVE-2024-1763

creationtimestamp| type| source ---|---|--- 2024-03-13 17:36:58+00:00| seen| https://t.me/ctinow/206933...

CVE-2024-1763

CVE-2024-1763 affects the WordPress plugin WP Social Login and Register Social Counter; all versions up to 3.0.0 are vulnerable due to a missing capability check on the /wp_social/v1/ REST endpoint, enabling unauthenticated modification of provider settings (enable/disable). Multiple connected so...

WordPress Wp Social Plugin <= 3.0.0 is vulnerable to Broken Access Control

Software Wp Social Type Plugin Vulnerable versions = 3.0.0 Fixed in 3.0.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1763 Patch priority Medium CVSS severity Medium 6.5 Developer Wpmet PSID e224abf48843 Credits Krzysztof Zając Required privilege...