Aller au contenu
Se connecter
4.3 Moyenne

CVE-2024-1337 The SKT Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability…

Description

The SKT Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saveSktbuilderPageData' function in all versions up to, and including, 4.1. This makes it possible for authenticated attackers, with subscriber access and above, to inject arbitrary content into pages.

Produits et versions touchés

Produit Versions touchées Corrigé en
SKT Page Builder 4.1 premières → 4.1 Pas de correctif indiqué

Autres CVE de SKT Page Builder

Les 3 CVE de SKT Page Builder →
CVE-2025-54005 Missing Authorization vulnerability in sonalsinha21 SKT Page Builder skt-builder allows Exploiting Incorrectly… 4.3 Moyenne CVE-2024-12848 The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on… 8.8 Élevée
Suivre cette CVE