2 matches found
CVE-2024-3607
The PropertyHive plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deletekeydate function in all versions up to, and including, 2.0.12. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete...
4.3CVSS4.4AI score0.00614EPSS
SaveExploits0References2
CVE-2024-3607: Missing Authorization
The PropertyHive plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deletekeydate function in all versions up to, and including, 2.0.12. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete...
4.3CVSS5.8AI score0.00614EPSS
SaveExploits0References1
20