Vulnerabilities > CVE-2024-0828 - Missing Authorization vulnerability in Hammadh Play.Ht

047910
CVSS 6.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
LOW
network
low complexity
hammadh
CWE-862
NVD
Published: 2024-03-13
Updated: 2025-03-11

Summary

The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers, with subscriber access or higher, to delete, retrieve, or modify post metadata, retrieve posts contents of protected posts, modify conversion data and delete article audio.

Vulnerable Configurations

Part Description Count
Application
Hammadh
1

Common Weakness Enumeration (CWE)

References