Lucene search
WpvulndbWPVDB-ID:F4912C06-A8C6-4857-9F2C-416EFAF7FE75HistoryFeb 02, 2024 - 12:00 a.m.
Orbit Fox by ThemeIsle < 2.10.29 - Unauthenticated Connected API Keys Update
2024-02-0200:00:00
wpscan.com
11
orbit fox
themeisle
vulnerability
unauthenticated
api keys
Description The plugin is vulnerable to unauthorized modification of data due to a missing capability check on the register_reference() function, allowing unauthenticated attackers to update the connected API keys.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 2.10.29 |
Related
cve
cve
CVE-2024-1047
2024-02-02 06:15:45
prion
prion
Design/Logic Flaw
2024-02-02 06:15:00
cvelist
cvelist
CVE-2024-1047
2024-02-02 05:33:14
nvd
nvd
CVE-2024-1047
2024-02-02 06:15:45
wordfence
wordfence
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.7%
Related for WPVDB-ID:F4912C06-A8C6-4857-9F2C-416EFAF7FE75