5.3
Moyenne
CVE-2024-8430 The Spice Starter Sites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
Description
The Spice Starter Sites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the spice_starter_sites_importer_creater function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to import demo content.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Spice Starter Sites 1.2 | premières → 1.2.5 | Pas de correctif indiqué |
| spice_starter_sites 1.2 | premières → 1.2.5 | Pas de correctif indiqué |