CVE-2023-6077

Slider - Ultimate Responsive Image Slider < 3.5.12 - Subscriber+ Arbitrary Post Access

published December 18, 2023

CVSS
—
EPSS
1%
Percentile
51.2
In the wild
Unconfirmed
What it is

The Slider WordPress plugin before 3.5.12 does not ensure that posts to be accessed via an AJAX action are slides and can be viewed by the user making the request, allowing any authenticated users, such as subscriber to access the content arbitrary post such as private, draft and password protected

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00665 · 51.2th percentile
Published
2023-12-18T20:08Z
EPSS history
Timeline
  • 18 DEC 20:08Z
    Slider - Ultimate Responsive Image Slider < 3.5.12 - Subscriber+ Arbitrary Post Access
    cvelistv5