CVE-2024-1745

2024-03-2605:15:49

[email protected]

web.nvd.nist.gov

wordpress

plugin

access control

9.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The Testimonial Slider WordPress plugin before 2.3.7 does not properly ensure that a user has the necessary capabilities to edit certain sensitive Testimonial Slider WordPress plugin before 2.3.7 settings, making it possible for users with at least the Author role to edit them.

Affected configurations

Vulners

Node

slidervillatestimonial_sliderRange<2.3.7

VendorProductVersionCPE
slidervillatestimonial_slider*cpe:2.3:a:slidervilla:testimonial_slider:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
slidervilla	testimonial_slider	*	cpe:2.3:a:slidervilla:testimonial_slider::::::::

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Testimonial Slider",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "2.3.7"
      }
    ],
    "defaultStatus": "unaffected"
  }
]