TI-2024-11073 CVE-2024-11936 · GHSA-44w3-4x9p-xmff
Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Priority MEDIUM 40
The Zox News theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' and 'restore_options' function in all ve…