Lucene search
+L

3 matches found

NVD
NVD
added 2024/02/29 1:43 a.m.30 views

CVE-2024-0516

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to unauthorized post metadata update due to a missing capability check on the wprupdateformactionmeta function in all versions up to, and including, 1.3.87. This makes it possible for unauthenticated attackers to update...

5.3CVSS5.1AI score0.00223EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/20 6:56 p.m.36 views

CVE-2024-0516 Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to unauthorized post metadata update due to a missing capability check on the wprupdateformactionmeta function in all versions up to, and including, 1.3.87. This makes it possible for unauthenticated attackers to update...

5.3CVSS5.4AI score0.00223EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/20 6:56 p.m.97 views

CVE-2024-0516

CVE-2024-0516 refers to a vulnerability in the Royal Elementor Addons and Templates plugin for WordPress, where unauthenticated users can update certain post metadata due to a missing capability check in wpr_update_form_action_meta in all versions up to and including 1.3.87. The issue is supporte...

5.3CVSS6AI score0.00223EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder