{"id":3194,"date":"2024-03-13T15:45:10","date_gmt":"2024-03-13T15:45:10","guid":{"rendered":"http:\/\/127.0.0.1\/escalada-de-privilegios-no-autenticada-en-malware-scanner-y-web-application-firewall\/"},"modified":"2024-03-13T15:45:10","modified_gmt":"2024-03-13T15:45:10","slug":"escalada-de-privilegios-no-autenticada-en-malware-scanner-y-web-application-firewall","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/escalada-de-privilegios-no-autenticada-en-malware-scanner-y-web-application-firewall\/","title":{"rendered":"Escalada de privilegios no autenticada en Malware Scanner y Web Application Firewall"},"content":{"rendered":"
<\/p>\n
El plugin Malware Scanner y Web Application Firewall para WordPress (ambos desarrollados por MiniOrange) presentan una vulnerabilidad de escalada de privilegios debido a la falta de verificaci\u00f3n de capacidades en la funci\u00f3n mo_wpns_init() en todas las versiones hasta, e incluyendo, la 4.7.2 (para Malware Scanner) y 2.1.1 (para Web Application Firewall). Esto permite a atacantes […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[907],"class_list":["post-3194","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-2172"],"yoast_head":"\n