PT-2025-7345 · WordPress · Raptive Ads

Tieu Pham Trong Nhan · Published 2025-02-19 · Updated 2025-02-25 · CVE-2024-13364

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Raptive Ads plugin for WordPress versions up to, and including, 3.6.3

Description The issue is related to a missing capability check on the site ads files reset() and cls file reset() functions. This allows unauthenticated attackers to reset the ad and cls files.

Recommendations For versions up to, and including, 3.6.3, update to a version that includes a fix for the missing capability check on the site ads files reset() and cls file reset() functions. As a temporary workaround, consider disabling the site ads files reset() and cls file reset() functions until a patch is available. Restrict access to the ad and cls files to minimize the risk of exploitation.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-13364

Affected Products

Raptive Ads

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-13364 · Security Note
• https://osv.dev/vulnerability/CVE-2024-13364 · Vendor Advisory
• https://wordfence.com/threat-intel/vulnerabilities/id/7a08d857-c8be-4ba8-b9fb-eed222a8cd8c?source=cve · Note
• https://twitter.com/CVEnew/status/1892132851153293386 · Twitter Post
• https://t.me/cvedetector/18422 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1892192528088084624 · Twitter Post
• https://t.me/cvenotify/112486 · Telegram Post
• https://plugins.trac.wordpress.org/changeset/3244125/#file0 · Note
• https://wordpress.org/plugins/adthrive-ads · Note
• https://t.me/cvenotify/111746 · Telegram Post