CVE-2024-13653

creationtimestamp| type| source ---|---|--- 2025-02-12 04:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113989033129729285 2025-02-12 05:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6f33yg2a 2025-02-12 06:48:39+00:00| seen|...

CVE-2024-13653

CVE-2024-13653 affects ZoxPress (WordPress Theme) versions up to 2.12.0. A missing capability check in the backup_options function allows authenticated attackers with Subscriber-level access or higher to modify arbitrary options, enabling potential privilege escalation (e.g., changing the default...