PT-2025-9077

Name of the Vulnerable Software and Affected Versions The WHMPress - WHMCS Client Area plugin for WordPress versions up to, and including, 4.3-revision-3 Description The issue allows unauthorized modification of data, potentially leading to privilege escalation, due to a missing capability check ...

CVE-2024-9195: Missing Authorization

The WHMPress - WHMCS Client Area plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the updatesettings case in the /admin/ajax.php file in all versions up to, and including, 4.3-revision-3. This makes ...