Unauthorized Data Modification in Zox News WordPress Theme by MVP Themes

CVE-2024-13643

What is CVE-2024-13643?

The Zox News theme for WordPress is affected by a vulnerability that enables authenticated users with Subscriber access and higher to modify critical site options. In versions up to 3.17.0, missing capability checks in the backup_options() and reset_options() functions enable these users to alter the default user role for registrations, potentially granting themselves administrative access. The exploitation of this loophole allows attackers to delete key options, possibly leading to service disruptions and errors, impacting legitimate users' access to the WordPress site.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References