2 matches found
CVE-2024-12202: Missing Authorization
The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'ironMusicajax' function in all versions up to, and including, 3.6. This makes it possible for authenticated attackers, with...
8.8CVSS5.8AI score0.00549EPSS
SaveExploits0References1
WordPress plugin Croma Music 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
8.8CVSS8.2AI score0.00549EPSS
SaveExploits0References2
20