cve/2024/CVE-2024-1095.md
2024-05-25 21:48:12 +02:00

919 B
Raw Blame History

CVE-2024-1095

Description

The Build & Control Block Patterns Boost up Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the settings_export() function in all versions up to, and including, 1.3.5.4. This makes it possible for unauthenticated attackers to export the plugin's settings.

POC

Reference

No PoCs from references.

Github