Medium severity5.3NVD Advisory· Published Feb 19, 2025· Updated Jun 17, 2026

CVE-2024-13364

Description

The Raptive Ads plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the site_ads_files_reset() and cls_file_reset() functions in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to reset the ad and cls files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Raptive/Raptive Ads
cpe:2.3:a:raptive:raptive_ads:*:*:*:*:*:wordpress:*:*
Range: <=3.6.3
WordPress/Raptive Adsllm-fuzzy2 versions
<=3.6.3+ 1 more
- (no CPE)range: <=3.6.3
- (no CPE)

Patches

Vulnerability mechanics

References

www.wordfence.com/threat-intel/vulnerabilities/id/7a08d857-c8be-4ba8-b9fb-eed222a8cd8cnvdThird Party Advisory
wordpress.org/plugins/adthrive-ads/nvdProduct
plugins.trac.wordpress.org/changeset/3244125/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000