Lucene search
+L

3 matches found

WPVulnDB
WPVulnDB
added 2024/05/07 12:00 a.m.25 views

RomethemeKit For Elementor < 1.4.2 - Missing Authorization

Description The RomethemeKit For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the addNewPost function in versions up to, and including, 1.4.1. This makes it possible for unauthenticated attackers to add new posts...

6.5CVSS6.7AI score0.00438EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder