CVE-2024-2962

Name of the Vulnerable Software and Affected Versions The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress versions up to, and including, 1.1.9

Description The issue is related to a missing capability check on the admin reload nav menu() function, which allows unauthenticated attackers to modify the location of display menus. This makes it possible for unauthorized modification of data.

Recommendations For versions up to, and including, 1.1.9, consider disabling the admin reload nav menu() function until a patch is available to prevent unauthorized modification of data. Restrict access to the admin navigation menu to minimize the risk of exploitation.