CVE-2024-12620

Published: 2025-02-01T04:15Z

Last Modified: 2025-02-24T16:41Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'agl_json' AJAX action in all versions up to, and including, 1.4.23. This makes it possible for unauthenticated attackers to update the plugin's settings. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt