TI-2024-00626 CVE-2024-0679 · GHSA-4494-4fpf-rg2vColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin InstallationPriority LOW 31The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_action_callback() function in all versions up to, and including, 3.1.2.CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01301 · Published 2024-01-20 · No fix listed CWE-862