CVE-2024-9520

CVE-2024-9520 refers to the WordPress WordPress UserPlus plugin, with vulnerable versions up to and including 2.0. The root cause is a missing capability check on multiple functions, allowing authenticated users with subscriber-level permissions or higher to add, modify, or delete user meta and p...