CVE-2024-13800

The CVE-2024-13800 entry concerns the WordPress ConvertPlus plugin. A missing capability check on the cp_dismiss_notice AJAX endpoint allows authenticated users with Subscriber-level access and above to perform unauthorized modifications of data, enabling updates to option values (to '1') that ca...