CVE-2024-0836

MEDIO 4.3CVE-2024-0836 · Published 31/01/2024 · updated 17/06/2026

In breve

CVE-2024-0836 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda review schema (radiustheme).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.43%, superiore al 36.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
review schema radiustheme	`≤ 2.1.14`	No fix yet

Description

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrs_review_edit() function in all versions up to, and including, 2.1.14. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify arbitrary reviews.

References

plugins.trac.wordpress.org/changeset/3028627/review-schema/trunk/app/Controllers/Ajax/Review.php · Patch
wordfence.com/threat-intel/vulnerabilities/id/b7039206-a25a-4aa0-87e2-be11dd1f12eb · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free