Medium · 6.5 CVE-2024-43939 EUVD-2024-40588GHSA-h7pm-jwh4-cx4r

WordPress Z Y N I T H plugin <= 7.4.9 - Unauthenticated Arbitrary Option Deletion vulnerability

Published Aug 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: VIICTORY MEDIA Product: Z Y N I T H

Description

Missing Authorization vulnerability in VIICTORY MEDIA LLC Z Y N I T H allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Z Y N I T H: from n/a through 7.4.9.

Affected products

Vendor	Product	Affected	Fixed
VIICTORY MEDIA	Z Y N I T H	≤ 7.4.9	—

References

https://patchstack.com/database/vulnerability/zynith-seo/wordpress-z-y-n-i-t-h-plugin-7-4-9-unauthenticated-arbitrary-option-deletion-vulnerability?_s_id=cve vdb-entry