VYPR

Zstore Manager Basic

Sign in to watch

by Ilenejohnson

CVEs (1)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2024-137150.000.00Jan 30, 2025The zStore Manager Basic plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the zstore_clear_cache() function in all versions up to, and including, 3.311. This makes it possible for authenticated attackers, with Subscriber-level access and above, to clear the plugin's cache.