cve/2024/CVE-2024-6755.md
2024-07-25 21:25:12 +00:00

843 B
Raw Permalink Blame History

CVE-2024-6755

Description

The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the wpw_auto_poster_quick_delete_multiple function in all versions up to, and including, 5.3.14. This makes it possible for unauthenticated attackers to delete arbitrary posts.

POC

Reference

No PoCs from references.

Github