CVE-2024-54378

CVE-2024-54378 Quietly Insights = 1.2.2 - 授权缺失导致已认证（订阅者+）任意选项更新 描述 WordPress 的 Quietly Insights 插件存在未经授权修改数据的漏洞，可能因函数缺少权限检查而导致权限提升。该漏洞影响所有版本直至 1.2.2（含）。这使得已认证的攻击者（拥有订阅者及以上权限）能够更新 WordPress 站点上的任意选项。攻击者可利用此漏洞将默认注册角色更改为管理员，并启用用户注册，从而获得对漏洞站点的管理员访问权限。 详情 类型 ：插件 别名 ：quietly-insights 受影响版本 ：1.2.2 CVSS ...

EUVD-2024-52498

Malicious code in bioql PyPI...

CVE-2024-54378

Missing Authorization vulnerability in Quietly Quietly Insights quietly-insights allows Privilege Escalation.This issue affects Quietly Insights: from n/a through = 1.2.2...

CVE-2024-54378

Missing Authorization vulnerability in Quietly Quietly Insights quietly-insights allows Privilege Escalation.This issue affects Quietly Insights: from n/a through = 1.2.2...

CVE-2024-54378 WordPress Quietly Insights plugin <= 1.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability

Missing Authorization vulnerability in Quietly Quietly Insights quietly-insights allows Privilege Escalation.This issue affects Quietly Insights: from n/a through = 1.2.2...

CVE-2024-54378

CVE-2024-54378 affects Quietly Insights (WordPress plugin). Root cause: Missing Authorization to perform Arbitrary Options Update leading to Privilege Escalation. Impact: Privilege escalation with high CVSS 3.1 base score 8.8 (CNA source: 3.1, Privileges: LOW, User Interaction: NONE). Public stat...

WordPress plugin Quietly Insights 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-36263 · Unknown · Quietly Insights

Name of the Vulnerable Software and Affected Versions: Quietly Insights versions prior to 1.2.3 Description: The issue is related to a missing authorization vulnerability that allows privilege escalation. Recommendations: For versions prior to 1.2.3, update to version 1.2.3 or later to resolve th...

WordPress Quietly Insights plugin <= 1.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability

Arbitrary Option Update to Privilege Escalation vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Quietly Insights versions = 1.2.2...