Filtered by vendor Themehunk Subscriptions
Filtered by product Top Store Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-10673 1 Themehunk 1 Top Store 2024-11-12 8.8 High
The Top Store theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the top_store_install_and_activate_callback() function in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins which can contain other exploitable vulnerabilities to elevate privileges and gain remote code execution.