Aller au contenu
4.3 Moyenne

CVE-2024-3893 The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized…

Description

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the rtcl_fb_gallery_image_delete AJAX action in all versions up to, and including, 3.0.10.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary attachements.

Produits et versions touchés

Produit Versions touchées Corrigé en
Classified Listing – Classified ads & Business Directory Plugin 3.0 premières → 3.0.10.3 Pas de correctif indiqué
classified_listing_plugin Versions non publiées
Classified Listing – AI-Powered Classified ads & Business Directory Plugin 3.0 premières → 3.0.10.3 Pas de correctif indiqué
Les 6 CVE de Classified Listing – Classified ads & Business Directory Plugin →
Suivre cette CVE