CVE-2024-1860
EUVD-2024-1758528.02.2024, 10:15
The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_add_whitelist() function in all versions up to, and including, 4.51. This makes it possible for unauthenticated attackers to add their IP Address to the whitelist circumventing protectionEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| billminozzi | anti_hacker | 𝑥 < 4.52 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| sminozzi | disable_json_api_login_lockdown_xml_rpc_pingback_stop_user_enumeration_anit_hacker_scan | 𝑥 ≤ 4.51 | ADP |
Common Weakness Enumeration
References