CVE-2024-13800

CVE-2024-13800 Popup Plugin For WordPress - ConvertPlus = 3.5.30 - 인증된 사용자구독자 이상의 제한된 옵션 업데이트에 대한 권한 누락 설명 ConvertPlus WordPress 플러그인은 최대 버전 3.5.30까지의 모든 버전에서 'cpdismissnotice' AJAX 엔드포인트에 대한 기능 권한 검사가 누락되어 데이터 무단 수정이 가능하며, 이로 인해 서비스 거부DoS로 이어질 수 있습니다. 이를 통해 구독자Subscriber 이상의 접근 권한을 가진 인증된 공격자가...

WordPress plugin ConvertPlus 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-13800: Missing Authorization

The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cpdismissnotice' AJAX endpoint in all versions up to, and including, 3.5.30. This makes it possible for authenticated attackers,...

CVE-2024-3237 ConvertPlug <= 3.5.25 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update

The ConvertPlug plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cpdismissnotice function in all versions up to, and including, 3.5.25. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVE-2024-3237: Missing Authorization

The ConvertPlug plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cpdismissnotice function in all versions up to, and including, 3.5.25. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

WordPress Plugin ConvertPlug 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...