Vulnerabilidades de creativform (CVE)

Registros CVE publicados para creativform, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

5.3Media

CVE-2024-7381 hace 2 años

Geo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution

creativform Geo Controller; wordpress geo_controller

The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing authorization and capability checks on the ajax__shortcode_cache function in all versions up to, and including, 8.6.9. This makes it possible for unauthen…

4.3Media

CVE-2024-7380 hace 2 años

Geo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion

creativform Geo Controller

The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability checks on the ajax__geolocate_menu and ajax__geolocate_remove_menu functions in all versions up to, and including, 8.7.3. This makes it poss…