forex-calculators, CVE-2024-13716

CVE, Research URL: CVE-2024-13716
Home page URL: Security reports for forex-calculators
Application: forex-calculators
Published on: Feb 28, 2025
Research Description: The Forex Calculators plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_settings_callback() function in all versions up to, and including, 1.3.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings.
Affected versions: max 1.3.8.
Status: vulnerable