Skip to content
Sign in
4.3 Medium

CVE-2024-1337 The SKT Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability…

Description

The SKT Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saveSktbuilderPageData' function in all versions up to, and including, 4.1. This makes it possible for authenticated attackers, with subscriber access and above, to inject arbitrary content into pages.

Affected products and versions

Product Affected versions Fixed in
SKT Page Builder 4.1 earliest → 4.1 No fix stated

Other CVEs of SKT Page Builder

The 3 CVEs of SKT Page Builder →
CVE-2025-54005 Missing Authorization vulnerability in sonalsinha21 SKT Page Builder skt-builder allows Exploiting Incorrectly… 4.3 Medium CVE-2024-12848 The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on… 8.8 High
Track this CVE