WordPress plugin SKT Page Builder has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-1963 · WordPress · Skt Page Builder

Name of the Vulnerable Software and Affected Versions: SKT Page Builder plugin for WordPress versions up to, and including, 4.6 Description: The issue allows for arbitrary file uploads due to a missing capability check on the addLibraryByArchive function. This makes it possible for authenticated...

CVE-2024-12848: Missing Authorization

The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the 'addLibraryByArchive' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to uploa...