CVE-2024-11354

The Ultimate YouTube Video & Shorts Player With Vimeo plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delytsingvid function in all versions up to, and including, 3.3. This makes it possible for authenticated attackers, with...

CVE-2024-11354

creationtimestamp| type| source ---|---|--- 2024-11-21 03:07:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113518737458774262...

CVE-2024-11354

CVE-2024-11354 concerns the WordPress plugin “Ultimate YouTube Video & Shorts Player With Vimeo”. The vulnerability affects all versions up to and including 3.3 and stems from a missing capability check in the del_ytsingvid() function, enabling authenticated attackers with Subscriber-level access...

WordPress Ultimate YouTube Video & Shorts Player With Vimeo Plugin <= 3.3 is vulnerable to Broken Access Control

Software Ultimate YouTube Video & Shorts Player With Vimeo Type Plugin Vulnerable versions = 3.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-11354 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1fa557c19676 Credits...