CVE-2024-27970 WordPress WP SendFox plugin <= 1.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BogdanFix WP SendFox.This issue affects WP SendFox: from n/a through 1.3.0...

CVE-2024-27970 WordPress WP SendFox plugin <= 1.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BogdanFix WP SendFox.This issue affects WP SendFox: from n/a through 1.3.0...

CVE-2024-27970

CVE-2024-27970 affects the WP SendFox WordPress plugin (WP SendFox) up to version 1.3.0. It is a Missing Authorization vulnerability allowing unauthorized actions. CVSSv3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N; base score 5.4. Patch status: Patched (update to a newer version).

WordPress WP SendFox Plugin <= 1.3.0 is vulnerable to Broken Access Control

Software WP SendFox Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-27970 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 73ea56665cde Credits Abdi Pranata Required privilege...