PT-2024-16349

Name of the Vulnerable Software and Affected Versions The Bard Extra plugin for WordPress versions prior to 1.2.8 Description The issue allows authenticated attackers with subscriber-level access and above to import demo data due to a missing capability check on the bardxtra import xml function...