Filtered by vendor Batch Cat Project Subscriptions
Filtered by product Batch Cat Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-24788 1 Batch Cat Project 1 Batch Cat 2024-11-21 6.5 Medium
The Batch Cat WordPress plugin through 0.3 defines 3 custom AJAX actions, which both require authentication but are available for all roles. As a result, any authenticated user (including simple subscribers) can add/set/delete arbitrary categories to posts.