Unauthorized Access to Data Due to Missing Capability Check

CVE-2024-1352

What is CVE-2024-1352?

The Classified Listing – Classified ads & Business Directory Plugin for WordPress is vulnerable to unauthorized data access and modification. This issue stems from a missing capability check in the rtcl_import_location() and rtcl_import_category() functions. As a result, authenticated users with subscriber-level access and higher can exploit this vulnerability to create terms, compromising the integrity of the data. Addressing this flaw is crucial for ensuring the security and reliability of WordPress installations utilizing this plugin.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References