WordPress Post Slider plugin <= 1.6.7 - Broken Access Control vulnerability

2022-10-0600:00:00

ptsfence (Patchstack Alliance)

patchstack.com

wordpress

post slider

broken access control

vulnerability

patchstack alliance

0.0004 Low

EPSS

Percentile

9.1%

JSON

Broken Access Control vulnerability leading to plugin settings change by the subscriber or higher role users discovered by ptsfence (Patchstack Alliance) in WordPress Post Slider plugin (versions <= 1.6.7).

Solution

           No patched version is available. No reply from the vendor.

CPENameOperatorVersion
post sliderle1.6.7

CPE	Name	Operator	Version
	post slider	le	1.6.7

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for PATCHSTACK:6BFBE71E9298ED878BF275D0FEEB6CAB