PT-2024-37197
CVE-2024-5858
·
تاريخ النشر
2024-06-15
·
تاريخ التحديث
2024-06-17
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
AI Infographic Maker plugin for WordPress versions up to, and including, 4.7.4
Description:
The issue allows authenticated attackers with Subscriber-level access and above to update arbitrary post titles due to a missing capability check on the qcld openai title generate desc AJAX action.
Recommendations:
For AI Infographic Maker plugin for WordPress versions up to, and including, 4.7.4, update to a version that includes a fix for the missing capability check on the qcld openai title generate desc AJAX action.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾