CVE-2021-24742CWE-863

Logo Slider and Showcase < 1.3.37 - Editor Plugin's Settings Update

published November 1, 2021

CVSS
—
EPSS
1%
Percentile
58.0
In the wild
Unconfirmed
What it is

The Logo Slider and Showcase WordPress plugin before 1.3.37 allows Editor users to update the plugin's settings via the rtWLSSettings AJAX action because it uses a nonce for authorisation instead of a capability check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00858 · 58.0th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-11-01T08:46Z
EPSS history
Timeline
  • 01 NOV 08:46Z
    Logo Slider and Showcase < 1.3.37 - Editor Plugin's Settings Update
    cvelistv5