GCVE - cpe:2.3:a:desertsnowman:plugin

Approved changes feed: RSS · Atom

cpe:2.3:a:desertsnowman:plugin_groups:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Desertsnowman (`7125aeaa-add9-5a3a-873e-be16388f5e53`)
Product	Plugin Groups (`dbb5cda3-1e02-58d7-8378-ea9915ec45fb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-1108`	vulnerable	2026-06-08 06:25:39.276533	Plugin Groups <= 2.0.6 - Missing Authorization to Unauthenticated Denial of Service MEDIUM (6.5) The Plugin Groups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_init() function in all versions up to, and including, 2.0.6. This makes it possible for unauthenticated attackers to change the settings of the plugin, which can also cause a denial of service due to a misconfiguration. Published: 2024-02-21T03:03:23.872Z Updated: 2026-04-08T17:03:59.418Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/8298f1fb-3165-40e3-9192-805a07c14cae?source=cve https://plugins.trac.wordpress.org/changeset/3036754/plugin-groups/trunk/classes/class-plugin-groups.php	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.