PT-2024-16919
CVE-2024-11334
·
تاريخ النشر
2024-11-21
·
تاريخ التحديث
2024-11-26
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
My Contador lesr plugin for WordPress versions up to and including 2.0
Description
The issue is related to unauthorized access of data due to a missing capability check on the
exportar registros() function. This allows unauthenticated attackers to export user data.Recommendations
For My Contador lesr plugin for WordPress versions up to and including 2.0, consider disabling the
exportar registros() function until a patch is available to prevent unauthorized data access. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾