CVE-2024-11638

The Gtbabel WordPress plugin is vulnerable in versions prior to 6.6.9 due to a failure to verify that the URL submitted for code analysis belongs to the specific blog. This flaw allows unauthenticated attackers to perform an unauthenticated admin account takeover by tricking a logged-in user (suc...