1 matches found
CVE-2024-1170: Missing Authorization
The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions UGC plugin for WordPress is vulnerable to unauthorized media file deletion due to a missing capability check on the handledeletedmedia function in all versions up to, and including,...
8.2CVSS5.8AI score0.00725EPSS
SaveExploits0References2
20