PT-2024-18246 · WordPress · Adfoxly

Published

2024-08-01

·

Updated

2024-08-02

·

CVE-2024-1715

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions AdFoxly – Ad Manager, AdSense Ads & Ads.txt plugin for WordPress versions up to, and including, 1.8.5
Description The issue allows unauthorized modification of data due to a missing capability check on the adfoxly ad status() function. This enables unauthenticated attackers to enable and disable ads.
Recommendations For versions up to, and including, 1.8.5, update to a version that includes a fix for the missing capability check in the adfoxly ad status() function. As a temporary workaround, consider disabling the adfoxly ad status() function until a patch is available.

Related Identifiers

CVE-2024-1715

Affected Products

Adfoxly