Knowledge Base documentation & wiki plugin – BasePress Docs, CVE-2024-10664
- CVE, Research URL
- Home page URL
-
Security reports for Knowledge Base documentation & wiki plugin – BasePress Docs
- Published on
- Dec 04, 2024
- Research Description
- The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepress_db_posts_update() function in all versions up to, and including, 2.16.3.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the database.
- Affected versions
-
max 2.16.3.4.
- Status
-
vulnerable