CVE-2024-13554

Published: 2025-02-12T04:15Z

Last Modified: 2025-02-25T03:52Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reorder_route() function in all versions up to, and including, 3.0.13. This makes it possible for unauthenticated attackers to reorder posts. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt