CVE-2024-11443

The de:branding plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the debrandingsave function in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with...

CVE-2024-11443 de:branding <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Update

The de:branding plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the debrandingsave function in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with...

CVE-2024-11443

The CVE-2024-11443 issue affects the de:branding WordPress plugin. Description: missing capability check in debranding_save() across versions up to 1.0.2 allows authenticated users with Subscriber+ privileges to modify options, potentially changing the default registration role to administrator a...