webfactory WP Force SSL & HTTPS SSL Redirect vulnerabilities (CVE)

CVE records published for webfactory WP Force SSL & HTTPS SSL Redirect, newest first. Follow to get an email when a new one appears.

1 results

4.2Medium

CVE-2024-5770 2 years ago

WP Force SSL & HTTPS SSL Redirect <= 1.66 - Missing Authorization to Settings Update

webfactory WP Force SSL & HTTPS SSL Redirect

The WP Force SSL & HTTPS SSL Redirect plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_save_setting' function in versions up to, and including, 1.66. This makes it possible for authenticate…