Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-1330

June 27, 2024, 12:47 p.m.

Product(s) Impacted

kadence-blocks-pro WordPress plugin

before 2.3.8

Description

The kadence-blocks-pro WordPress plugin before 2.3.8 does not prevent users with at least the contributor role using some of its shortcode's functionalities to leak arbitrary options from the database.

Weaknesses

Date

Published: June 27, 2024, 6:15 a.m.

Last Modified: June 27, 2024, 12:47 p.m.

Status : Undergoing Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

contact@wpscan.com

References

https://wpscan.com/ contact@wpscan.com