Unauthorized Data Modification in ZoxPress WordPress Theme

CVE-2024-13654

What is CVE-2024-13654?

The ZoxPress theme for WordPress is susceptible to unauthorized modification of data due to a missing capability check on the 'reset_options' function. This vulnerability affects all versions up to and including 2.12.0, enabling authenticated attackers with Subscriber-level access or higher to delete arbitrary option values. Such actions can create errors on the site, potentially leading to a denial of service, making it imperative for users to update and secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References