CVE-2024-13654

creationtimestamp| type| source ---|---|--- 2025-02-12 04:45:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113989092128308032 2025-02-12 05:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6hputm2x 2025-02-12 06:48:41+00:00| seen|...

CVE-2024-13654 ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion

The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'resetoptions' function in all versions up to, and including, 2.12.0. This makes it possible for...