Descrição
The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the apmswn_create_discount() function in all versions up to, and including, 2.8.0. This makes it possible for unauthenticated attackers to create coupons.
Software
Não informado
Tipo Software
Plugin
CVE
CVE-2024-13316
Tags
Nâo informado
Data de publicação
18/02/2025
Última atualização
22/02/2025
Pontuação em CVSS 3.0
5.3
Médio