CVE-2024-13654

Summary

CVE-2024-13654 is a vulnerability affecting the ZoxPress - The All-In-One WordPress News Theme for WordPress. The issue lies in the lack of capability checks on the 'reset_options' function, which can be exploited by authenticated attackers with Subscriber-level access or higher. By deleting arbitrary option values, they can cause errors and ultimately lead to a denial of service for legitimate users on the WordPress site. This vulnerability was present in all versions up to and including 2.12.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.