CVE-2024-2962

Publication date

2024-03-27 08:31:14

Family

Wordfence

State

PUBLISHED

Description

The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_reload_nav_menu() function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to modify the location of display menus.