Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: PureThemes Findeo, Realteo 1.2.4, 1.3.1 Clear all filters
TI-2021-06530 CVE-2021-24238 · GHSA-828j-hg8h-vf6g

Realteo < 1.2.4 - Arbitrary Property Deletion via IDOR

Priority LOW 31

The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not ensure that the requested property to be deleted belong to the user making the request, allowing any authenticated users to delete arbitrary pr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01114 Published 2021-04-22 Fixed in 1.2.4, 1.3.1 CWE-284