Unauthorized Access Vulnerability in Play.ht Plugin for WordPress

CVE-2024-0828

What is CVE-2024-0828?

The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress has a vulnerability that allows authenticated attackers, with subscriber access or higher, to bypass functionality safeguards. A missing capability check on several critical functions exposes sensitive operations—such as modifying post metadata, accessing content from protected posts, and deleting audio files—making it essential for users to update their plugin to protect against exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References