Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-4280 EUVD-2024-32830GHSA-m2qx-r5jq-8pfw

White Label CMS <= 2.7.3 - Missing Authorization to Plugin Settings Reset

Published May 10, 2024 · Updated Apr 8, 2026 · Assigned by Wordfence

Description

The White Label CMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reset_plugin function in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attackers to reset plugin settings.

Affected products

VendorProductAffectedFixed
videousermanuals White Label CMS ≤ 2.7.3 —

References