CVE-2024-13687
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Feb 18, 2025
Updated: Feb 21, 2025
CWE ID 862
Summary
CVE-2024-13687: A vulnerability has been identified in the Team Builder – Meet the Team plugin for WordPress. This issue allows authenticated attackers with Subscriber-level access or higher to unauthorizedly modify plugin settings due to a missing capability check in the save_team_builder_options() function, impacting all versions up to 1.3.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share