TI-2024-12755 CVE-2024-13716 · GHSA-cv9c-xhmv-55q3
Forex Calculators <= 1.3.7 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Priority LOW 20
The Forex Calculators plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_settings_callback() function in all versions up to, and including, 1.3.7.