Unauthorized Modification of Data Passwords in The Reviews Feed Plugin

CVE-2024-8199

What is CVE-2024-8199?

The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress contains a security flaw that allows authorized users with Subscriber-level access or higher to modify sensitive data. This vulnerability arises due to a missing capability check within the 'update_api_key' function, potentially enabling attackers to change API Key options without proper authorization. All versions up to and including 1.1.2 are impacted, highlighting the need for prompt action to secure affected installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References