CalvinBackup/CVEs-PoC
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-05-12 21:42:20 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
8e2ebbf9bd04edab52d0cbcbc6c2f6e2cfdaa67d
CVEs-PoC/2024/CVE-2024-8199.md
T
0xMarcio 6a17b5b11e Update CVE sources 2024-08-30 20:52
2024-08-30 20:52:42 +00:00

1.0 KiB
Raw Blame History

CVE-2024-8199

Description

The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_api_key' function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update API Key options.

POC

Reference

No PoCs from references.

Github

Reference in New Issue View Git Blame Copy Permalink