CVE-2024-0766
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-0766 is a vulnerability affecting the Envo's Elementor Templates & Widgets plugin for WooCommerce on WordPress. This issue arises from a missing capability check on the templates_ajax_request function, which is present in versions up to and including 1.4.4. This vulnerability allows subscribers and higher to modify data unauthorizedly, enabling them to create templates. This poses a significant risk to websites using this plugin, potentially leading to unintended data alterations. It is recommended that users update to the latest version of the plugin to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.