{ "id": "CVE-2024-10078", "sourceIdentifier": "security@wordfence.com", "published": "2024-10-18T08:15:04.060", "lastModified": "2024-10-22T16:28:26.113", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "The WP Easy Post Types plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 1.4.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to add, modify, or delete plugin options and posts." }, { "lang": "es", "value": "El complemento WP Easy Post Types para WordPress es vulnerable al acceso no autorizado, la modificaci\u00f3n y la p\u00e9rdida de datos debido a la falta de una comprobaci\u00f3n de capacidad en varias funciones en todas las versiones hasta la 1.4.4 incluida. Esto permite que atacantes autenticados, con acceso de nivel de suscriptor o superior, agreguen, modifiquen o eliminen opciones y publicaciones del complemento." } ], "metrics": { "cvssMetricV31": [ { "source": "security@wordfence.com", "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 7.3, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" }, "exploitabilityScore": 3.9, "impactScore": 3.4 }, { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" }, "exploitabilityScore": 2.8, "impactScore": 2.5 } ] }, "weaknesses": [ { "source": "security@wordfence.com", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-862" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:newsignature:wp_easy_post_types:*:*:*:*:*:wordpress:*:*", "versionEndIncluding": "1.4.4", "matchCriteriaId": "9EA8FEAA-01ED-4505-881A-745E04745C3B" } ] } ] } ], "references": [ { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L111", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L112", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L113", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L114", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L115", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L116", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L117", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L118", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L119", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L120", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L121", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L122", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L123", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L124", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L125", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L126", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L127", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L128", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L129", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L130", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L131", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L132", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L133", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L134", "source": "security@wordfence.com", "tags": [ "Product" ] }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d12c4b1c-23d0-430f-a6ea-0a3ab487ed10?source=cve", "source": "security@wordfence.com", "tags": [ "Third Party Advisory" ] } ] }