CVE-2024-13715

CVE-2024-13715 affects the WordPress plugin zStore Manager Basic (versions up to 3.311). Root cause: a missing capability check in the function zstore_clear_cache() . Impact: authenticated attackers with Subscriber+ privileges can clear the plugin cache, causing unauthorized data loss. Remediatio...