4.3
Moyenne
CVE-2024-10786 The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing…
Description
The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the sla_clear_user_cache function in all versions up to, and including, 2.7.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to clear user caches.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Simple Local Avatars 2.7 | premières → 2.7.11 | Pas de correctif indiqué |