PT-2024-19039 · Unknown · Rabbitloader

Name of the Vulnerable Software and Affected Versions: RabbitLoader versions n/a through 2.19.13 Description: The issue is related to a Missing Authorization vulnerability in RabbitLoader. Recommendations: For versions n/a through 2.19.13, at the moment, there is no information about a newer...

RabbitLoader < 2.19.14 - Missing Authorization via multiple AJAX actions

Description The RabbitLoader plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 2.19.13. This makes it possible for authenticated attackers, with subscriber-level...

WordPress RabbitLoader Plugin <= 2.19.13 is vulnerable to Broken Access Control

Software RabbitLoader Type Plugin Vulnerable versions = 2.19.13 Fixed in 2.19.14 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-21751 Patch priority Low CVSS severity Low 5.4 Developer RabbitLoader PSID c62f122aaf45 Credits Abdi Pranata Required privilege...