CVE-2021-24739CWE-639

Logo Carousel < 3.4.2 - Unauthorised Private Post Access

published December 21, 2021

CVSS
—
EPSS
1%
Percentile
63.7
In the wild
Unconfirmed
What it is

The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other users via the Carousel Duplication feature

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01039 · 63.7th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2021-12-21T08:45Z
EPSS history
Timeline
  • 21 DEC 08:45Z
    Logo Carousel < 3.4.2 - Unauthorised Private Post Access
    cvelistv5