PT-2024-18241 · WordPress · Addon Library

Name of the Vulnerable Software and Affected Versions: Addon Library plugin for WordPress versions up to, and including, 1.3.76 Description: The issue is related to a missing capability check on the onAjaxAction function action, allowing authenticated attackers with subscriber-level access and...