CVE-2024-9265

CVE-2024-9265 describes a privilege-escalation in the WordPress plugin Echo RSS Feed Post Generator . The vulnerability arises because the plugin does not properly restrict which roles can be set during registration via the echo_check_post_header_sent() function, enabling unauthenticated attacker...