Unauthorized Access to Data Due to Missing Capability Check
CVE-2024-1352
5.3MEDIUM
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 9 April 2024
What is CVE-2024-1352?
The Classified Listing – Classified ads & Business Directory Plugin for WordPress is vulnerable to unauthorized data access and modification. This issue stems from a missing capability check in the rtcl_import_location() and rtcl_import_category() functions. As a result, authenticated users with subscriber-level access and higher can exploit this vulnerability to create terms, compromising the integrity of the data. Addressing this flaw is crucial for ensuring the security and reliability of WordPress installations utilizing this plugin.
Affected Version(s)
Classified Listing – Classified ads & Business Directory Plugin * <= 3.0.4