CVE-2024-11926: falha de média gravidade em ShineTheme Travel Booking WordPress Theme
Traveler <= 3.1.6 - Missing Authorization in Several AJAX Actions
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.3%
The Travel Booking WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '__stPartnerCreateServiceRental', 'st_delete_order_item', '_st_partner_approve_booking', 'save_order_item', and '__userDenyEachInfo' functions in all versions up to, and including, 3.1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify posts, delete posts and pages, approve arbitrary orders, insert orders with arbitrary prices, and deny user information.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Produtos afetados
ShineTheme · Travel Booking WordPress ThemeCVEs relacionadas — ShineTheme Travel Booking WordPress Theme
No mesmo produto, das mais perigosas para as menos.
CVE-2024-12811HIGHTraveler <= 3.1.9 - Authenticated (Contributor+) Local File Inclusion via ShortcodeEPSS 0.8%CVE-2025-1771CRITICALTraveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_postEPSS 0.7%CVE-2024-11912HIGHTraveler <= 3.1.6 - Unauthenticated SQL Injection via order_idEPSS 0.5%CVE-2025-1773MEDIUMTraveler <= 3.1.8 - Reflected Cross-Site ScriptingEPSS 0.3%