{"id":3150,"date":"2024-03-11T09:45:28","date_gmt":"2024-03-11T09:45:28","guid":{"rendered":"http:\/\/127.0.0.1\/vulnerabilidad-de-missing-authorization-en-auto-affiliate-links-6-4-3\/"},"modified":"2024-03-11T09:45:28","modified_gmt":"2024-03-11T09:45:28","slug":"vulnerabilidad-de-missing-authorization-en-auto-affiliate-links-6-4-3","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/vulnerabilidad-de-missing-authorization-en-auto-affiliate-links-6-4-3\/","title":{"rendered":"Vulnerabilidad de Missing Authorization en Auto Affiliate Links <= 6.4.3"},"content":{"rendered":"
<\/p>\n
El plugin Auto Affiliate Links para WordPress es vulnerable a la modificaci\u00f3n no autorizada de datos debido a la falta de una verificaci\u00f3n de capacidad en la funci\u00f3n aalAddLink en todas las versiones hasta, e incluyendo, la 6.4.3. Esto permite que atacantes autenticados, con acceso de suscriptor o superior, a\u00f1adan enlaces arbitrarios a las publicaciones. […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[863],"class_list":["post-3150","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1843"],"yoast_head":"\n