CVE-2024-13231

Published: 2025-02-19T09:15Z

Last Modified: 2025-03-06T20:21Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The WordPress Portfolio Builder – Portfolio Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'add_video' function in all versions up to, and including, 1.1.7. This makes it possible for unauthenticated attackers to add arbitrary videos to any portfolio gallery. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt