Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_action_callback() function in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to install and activate arbitrary plugins.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
@hyperconectado @MuchoHacker Wordpress es muy vulnerable, la template que usa tiene esta vulnerabilidad, CVE-2024-0679 no se si ya este parchada, pero permitía ingresos no autorizados, plugins que tiene su sitio con vulnerabilidades, ThemeGrill Demo Importer, Limit Login Attempts Reloaded, entre otras
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | themegrill | colormag | - | wordpress | - |