CVE-2024-8430: Spice Starter Sites <= 1.2.5 - Missing Authorization to Unauthenticated Demo Content Import
The Spice Starter Sites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the spicestartersitesimportercreater function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to import demo content.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8430?
The severity of CVE-2024-8430 is considered high due to the vulnerability allowing unauthorized data modification.
How do I fix CVE-2024-8430?
To fix CVE-2024-8430, update the Spice Starter Sites plugin to the latest version that includes a proper capability check.
Who is affected by CVE-2024-8430?
Any user utilizing the Spice Starter Sites plugin for WordPress versions up to and including 1.2.5 is affected by CVE-2024-8430.
What type of vulnerability is CVE-2024-8430?
CVE-2024-8430 is classified as a security vulnerability that allows unauthenticated attackers to modify data.
When was CVE-2024-8430 disclosed?
CVE-2024-8430 was disclosed as part of the public vulnerabilities database in 2024.