CVE-2024-12618

creationtimestamp| type| source ---|---|--- 2025-01-09 11:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhvdpp72l 2025-01-09 12:29:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113798400410997715 2025-01-09 12:44:38+00:00| seen|...

CVE-2024-12618 Newsletter2Go <= 4.0.14 - Missing Authorization to Authenticated (Subscriber+) Style Reset

The Newsletter2Go plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'resetStyles' AJAX action in all versions up to, and including, 4.0.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2024-12618 Newsletter2Go <= 4.0.14 - Missing Authorization to Authenticated (Subscriber+) Style Reset

The Newsletter2Go plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'resetStyles' AJAX action in all versions up to, and including, 4.0.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...