Security Advisory

CVE-2024-0791

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-02-05 21:21:33

Last updated 2026-04-08 16:36:41

Assigner Wordfence

CVSS score 4.3

State PUBLISHED

Description

The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to unauthorized access, modification or loss of data due to a missing capability check on the wpbe_create_new_term, wpbe_update_tax_term, and wpbe_delete_tax_term functions in all versions up to, and including, 1.0.8.1. This makes it possible for authenticated attackers, with subscriber access or higher, to create, delete or modify taxonomy terms.

← Browse all CVEs View on cve.org ↗