TI-2024-10605 CVE-2024-11443 · GHSA-mpgq-5v7g-77w2
de:branding <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Update
Priority MEDIUM 41
The de:branding plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the debranding_save() function in all versions up to, and…