Skip to content
OpenAdvisories
High · 7.5 CVE-2024-2848 EUVD-2024-27792GHSA-8vpf-jx6q-39fr

Responsive <= 5.0.2 - Missing Authorization to HTML Injection

Published Mar 29, 2024 · Updated Apr 8, 2026 · Assigned by Wordfence

Description

The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_footer_text_callback function in all versions up to, and including, 5.0.2. This makes it possible for unauthenticated attackers to inject arbitrary HTML content into the site's footer.

Affected products

VendorProductAffectedFixed
cyberchimps Responsive ≤ 5.0.2 —

References