Lucene search
K

6 matches found

NVD
NVD
added 2024/09/05 11:15 a.m.11 views

CVE-2024-7380

The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability checks on the ajaxgeolocatemenu and ajaxgeolocateremovemenu functions in all versions up to, and including, 8.7.3. This makes it possible for authenticated attackers, with...

4.3CVSS0.00122EPSS
Exploits0References2
CVE
CVE
added 2024/09/05 11:0 a.m.46 views

CVE-2024-7380

CVE-2024-7380 — Geo Controller (WordPress) security issue : The Geo Controller plugin (WordPress) up to and including version 8.6.9 is vulnerable to unauthorized menu creation/deletion due to missing capability checks in ajax__geolocate_menu and ajax__geolocate_remove_menu. Affected product: Geo ...

4.3CVSS5.9AI score0.00122EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/09/05 11:0 a.m.19 views

CVE-2024-7380 Geo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion

The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability checks on the ajaxgeolocatemenu and ajaxgeolocateremovemenu functions in all versions up to, and including, 8.7.3. This makes it possible for authenticated attackers, with...

4.3CVSS0.00122EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/05 11:0 a.m.10 views

CVE-2024-7380 Geo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion

The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability checks on the ajaxgeolocatemenu and ajaxgeolocateremovemenu functions in all versions up to, and including, 8.7.3. This makes it possible for authenticated attackers, with...

4.3CVSS5.9AI score0.00122EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/06/05 3:12 a.m.2 views

WordPress Restaurant Menu and Food Ordering plugin <= 2.4.16 - Missing Authorization to Menu Creation vulnerability

Missing Authorization to Menu Creation vulnerability discovered by Lucio Sá in WordPress Plugin Five Star Restaurant Menu versions = 2.4.16...

4.3CVSS7AI score0.00204EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2021/07/12 12:0 a.m.5 views

WordPress Advance Menu Manager plugin <= 3.0.1 - Unauthorized Menu Creation/Deletion vulnerability

Unauthorized Menu Creation/Deletion vulnerability discovered by WPScanTeam in WordPress Advance Menu Manager plugin versions = 3.0.1 Solution Update the WordPress Advance Menu Manager plugin to the latest available version at least 3.0.2...

3AI score
Exploits0References2Affected Software1
Rows per page
Query Builder