TI-2024-01590 CVE-2024-1710 · GHSA-7vf7-cqc9-qxj2Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File UploadPriority MEDIUM 41The Addon Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the onAjaxAction function action in all versions up to, and including, 1.3.76.CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00684 · Published 2024-02-24 · No fix listed CWE-862
