Aller au contenu
Se connecter
5.3 Moyenne

CVE-2024-13423 The Sparkling theme for WordPress is vulnerable to unauthorized plugin activation/deactivation due to a missing…

Description

The Sparkling theme for WordPress is vulnerable to unauthorized plugin activation/deactivation due to a missing capability check on the 'sparkling_activate_plugin' and 'sparkling_deactivate_plugin' functions in versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers to activate/deactivate arbitrary plugins.

Produits et versions touchés

Produit Versions touchées Corrigé en
Sparkling 2.4 premières → 2.4.9 Pas de correctif indiqué

Autres CVE de Sparkling

Les 2 CVE de Sparkling →
CVE-2020-36708 The following themes for WordPress are vulnerable to Function Injections in versions up to and including… 9.8 Critique
Suivre cette CVE