CVE-2024-13364

Name of the Vulnerable Software and Affected Versions Raptive Ads plugin for WordPress versions up to, and including, 3.6.3

Description The issue is related to a missing capability check on the site ads files reset() and cls file reset() functions. This allows unauthenticated attackers to reset the ad and cls files.

Recommendations For versions up to, and including, 3.6.3, update to a version that includes a fix for the missing capability check on the site ads files reset() and cls file reset() functions. As a temporary workaround, consider disabling the site ads files reset() and cls file reset() functions until a patch is available. Restrict access to the ad and cls files to minimize the risk of exploitation.