Demo Awesome, CVE-2024-13637

CVE, Research URL: CVE-2024-13637
Home page URL: Security reports for Demo Awesome
Application: Demo Awesome
Published on: Apr 02, 2025
Research Description: The Demo Awesome plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin function in all versions up to, and including, 1.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate arbitrary plugins..
Affected versions: max 1.0.3.
Status: vulnerable