WordPress plugin RabbitLoader security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

RabbitLoader < 2.19.14 - Missing Authorization via multiple AJAX actions

Description The RabbitLoader plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 2.19.13. This makes it possible for authenticated attackers, with subscriber-level...

WordPress RabbitLoader Plugin <= 2.19.13 is vulnerable to Broken Access Control

Software RabbitLoader Type Plugin Vulnerable versions = 2.19.13 Fixed in 2.19.14 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-21751 Patch priority Low CVSS severity Low 5.4 Developer RabbitLoader PSID c62f122aaf45 Credits Abdi Pranata Required privilege...