CVE-2024-1095

The CVE-2024-1095 entry concerns the WordPress plugin Build & Control Block Patterns – Boost up Gutenberg Editor. Affected versions are up to 1.3.5.4. The issue is a missing capability check in the settings_export() function, enabling unauthenticated users to export the plugin’s settings. Publicl...