CVE-2018-11579

class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulnerability, related to certain wpajaxnopriv usage. Anyone can change the plugin's setting by simply sending a request with a...

PT-2018-10681

Name of the Vulnerable Software and Affected Versions WooCommerce Category Banner Management plugin version 1.1.0 Description The issue is related to an Unauthenticated Settings Change, allowing anyone to modify the plugin's settings by sending a request with a wbm save shop page banner data...