Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-13364

Raptive Ads <= 3.6.3 - Missing Authorization to Unauthenticated Data/Settings Reset

Description

The Raptive Ads plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the site_ads_files_reset() and cls_file_reset() functions in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to reset the ad and cls files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

raptive Raptive Ads

Default version status: unaffected

  • 0 to ≤ 3.6.3affected

References