Vulnerability Description
The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to unauthorized access, modification or loss of data due to a missing capability check on the wpbe_create_new_term, wpbe_update_tax_term, and wpbe_delete_tax_term functions in all versions up to, and including, 1.0.8.1. This makes it possible for authenticated attackers, with subscriber access or higher, to create, delete or modify taxonomy terms.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Pluginus | Wolf - Wordpress Posts Bulk Editor And Products Manager Professional | <= 1.0.8.1 |
Related Weaknesses (CWE)
References
- https://plugins.trac.wordpress.org/browser/bulk-editor/trunk/index.phpProduct
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&newPatch
- https://www.wordfence.com/threat-intel/vulnerabilities/id/13c66a8f-b35f-4943-888Third Party Advisory
- https://plugins.trac.wordpress.org/browser/bulk-editor/trunk/index.phpProduct
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&newPatch
- https://www.wordfence.com/threat-intel/vulnerabilities/id/13c66a8f-b35f-4943-888Third Party Advisory
FAQ
What is CVE-2024-0791?
CVE-2024-0791 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to unauthorized access, modification or loss of data due to a missing capability check on the wpbe_cr...
How severe is CVE-2024-0791?
CVE-2024-0791 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-0791?
Check the references section above for vendor advisories and patch information. Affected products include: Pluginus Wolf - Wordpress Posts Bulk Editor And Products Manager Professional.