CVE-2018-11579

2022-10-0316:21:52

mitre

www.cve.org

cve-2018-11579

wordpress

vulnerability

settings change

plugin

0.001 Low

EPSS

Percentile

37.1%

JSON

class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulnerability, related to certain wp_ajax_nopriv_ usage. Anyone can change the plugin’s setting by simply sending a request with a wbm_save_shop_page_banner_data action.