CVE-2024-13316

creationtimestamp| type| source ---|---|--- 2025-02-18 09:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligwehm5vl2y 2025-02-18 10:57:29+00:00| seen| https://t.me/cvedetector/18295...

CVE-2024-13316

The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the apmswncreatediscount function in all versions up to, and including, 2.8.0. This makes...

CVE-2024-13316 Scratch & Win – Giveaways and Contests <= 2.8.0 - Missing Authorization to Unauthenticated Coupon Creation

The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the apmswncreatediscount function in all versions up to, and including, 2.8.0. This makes...