WordPress Play.ht Plugin <= 3.6.4 is vulnerable to Broken Access Control

Software Play.ht Type Plugin Vulnerable versions = 3.6.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0828 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID efb5c07e09ff Credits Francesco Carlucci Required privilege...

CVE-2024-0828

The CVE-2024-0828 entry concerns the Play.ht WordPress plugin. The vulnerability is due to missing capability checks in several functions, affecting all versions up to and including 3.6.4. This allows authenticated attackers with subscriber access or higher to delete, retrieve, or modify post met...