Medium severity5.3NVD Advisory· Published Mar 27, 2024· Updated Jun 17, 2026

CVE-2024-2962

Description

The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_reload_nav_menu() function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to modify the location of display menus.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Networkerinferred2 versions
<=1.1.9+ 1 more
- (no CPE)range: <=1.1.9
- (no CPE)range: <=1.1.9
Package: https://wordpress.org/themes/networker

Patches

Vulnerability mechanics

References

gist.github.com/Xib3rR4dAr/ab293092ffcfe3c14a3c7daf5462a50bnvd
gist.github.com/Xib3rR4dAr/f5f5d07263fdac28b6e9ba2f6c4e4523nvd
www.wordfence.com/threat-intel/vulnerabilities/id/1c2b9858-eb0c-42bd-bc32-c58c0f809fc8nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000