WordPress Plugin Vulnerabilities
Charitable < 1.8.1.8 - Missing Authorization via ajax_license_check()
Description
The Charitable plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_license_check function in versions up to, and including, 1.8.1.7. This makes it possible for unauthenticated attackers to verify a license.
Affects Plugins
Fixed in 1.8.1.8 References
Classification
Type
NO AUTHORISATION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Dhabaleshwar Das
Verified
No
WPVDB ID
Timeline
Publicly Published
2024-07-04 (about 2 years ago)
Added
2024-07-10 (about 2 years ago)
Last Updated
2024-07-10 (about 2 years ago)
