CVE-2024-9626

The Editorial Assistant by Sovrn plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajaxzemantasetfeaturedimage' function in versions up to, and including, 1.3.3. This makes it possible for authenticated attackers, with subscriber-lev...

CVE-2024-9626

The Editorial Assistant by Sovrn plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajaxzemantasetfeaturedimage' function in versions up to, and including, 1.3.3. This makes it possible for authenticated attackers, with subscriber-lev...

CVE-2024-9626 Editorial Assistant by Sovrn <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Attachment Upload and Set Post Featured Image

The Editorial Assistant by Sovrn plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajaxzemantasetfeaturedimage' function in versions up to, and including, 1.3.3. This makes it possible for authenticated attackers, with subscriber-lev...

CVE-2024-9626

CVE-2024-9626 affects Editorial Assistant by Sovrn for WordPress (

PT-2024-39726

Name of the Vulnerable Software and Affected Versions The Editorial Assistant by Sovrn plugin for WordPress versions up to, and including, 1.3.3 Description The issue allows authenticated attackers with subscriber-level access and above to modify data without proper authorization. This is due to ...

WordPress plugin Editorial Assistant by Sovrn 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

CVE-2024-9626: Missing Authorization

The Editorial Assistant by Sovrn plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajaxzemantasetfeaturedimage' function in versions up to, and including, 1.3.3. This makes it possible for authenticated attackers, with subscriber-lev...

WordPress Editorial Assistant by Sovrn plugin <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Attachment Upload and Set Post Featured Image vulnerability

Missing Authorization to Authenticated Subscriber+ Attachment Upload and Set Post Featured Image vulnerability discovered by István Márton in WordPress Plugin Editorial Assistant by Sovrn versions = 1.3.3...

WordPress Editorial Assistant by Sovrn Plugin <= 1.3.3 is vulnerable to Broken Access Control

Software Editorial Assistant by Sovrn Type Plugin Vulnerable versions = 1.3.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9626 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b5ac4306ffbd Credits István Márton...