Lucene search
+L

3 matches found

OSV
OSV
•added 2021/12/21 9:15 a.m.•13 views

CVE-2021-24739

The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other users via the Carousel Duplication feature...

8.1CVSS5.9AI score0.01006EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2021/12/21 12:00 a.m.•15 views

PT-2021-16240 · WordPress · Logo Carousel

Name of the Vulnerable Software and Affected Versions: Logo Carousel WordPress plugin versions prior to 3.4.2 Description: The issue allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other users via the Carousel Duplication feature...

8.1CVSS8AI score0.01006EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/21 12:00 a.m.•2 views

CVE-2021-24739: Authorization Bypass Through User-Controlled Key

The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other users via the Carousel Duplication feature...

8.1CVSS6AI score0.01006EPSS
SaveExploits2References3
Rows per page
Query Builder