2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Networker - Tech News WordPress Theme with Dark Mode","vendor":"codesupplyco","versions":[{"lessThanOrEqual":"1.1.9","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"},{"affectedData":[{"cpes":["cpe:2.3:a:codesupplyco:networker_technews_wordpress_theme_with_dark_mode:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"networker_technews_wordpress_theme_with_dark_mode","vendor":"codesupplyco","versions":[{"lessThanOrEqual":"1.1.9","status":"affected","version":"0","versionType":"semver"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_reload_nav_menu() function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to modify the location of display menus."},{"lang":"es","value":"El tema Networker - Tech News WordPress con modo oscuro para WordPress es vulnerable a modificaciones no autorizadas de datos debido a una falta de verificación de capacidad en la función admin_reload_nav_menu() en todas las versiones hasta la 1.1.9 incluida. Esto hace posible que atacantes no autenticados modifiquen la ubicación de los menús de visualización."}],"id":"CVE-2024-2962","lastModified":"2026-06-17T07:25:54.977","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"security@wordfence.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-2962","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-08-02T15:34:53.410862Z","version":"2.0.3"}}]},"published":"2024-03-27T09:15:07.797","references":[{"source":"security@wordfence.com","url":"https://gist.github.com/Xib3rR4dAr/ab293092ffcfe3c14a3c7daf5462a50b"},{"source":"security@wordfence.com","url":"https://gist.github.com/Xib3rR4dAr/f5f5d07263fdac28b6e9ba2f6c4e4523"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1c2b9858-eb0c-42bd-bc32-c58c0f809fc8?source=cve"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://gist.github.com/Xib3rR4dAr/ab293092ffcfe3c14a3c7daf5462a50b"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://gist.github.com/Xib3rR4dAr/f5f5d07263fdac28b6e9ba2f6c4e4523"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1c2b9858-eb0c-42bd-bc32-c58c0f809fc8?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"security@wordfence.com","type":"Secondary"}]}
|