PropertyHive, CVE-2024-3607

CVE, Research URL: CVE-2024-3607
Home page URL: Security reports for PropertyHive
Application: PropertyHive
Published on: May 02, 2024
Research Description: The PropertyHive plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_key_date() function in all versions up to, and including, 2.0.12. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary posts
Affected versions: Min -, max 2.0.13.
Status: vulnerable