CVE-2021-24742

The Logo Slider and Showcase WordPress plugin before 1.3.37 allows Editor users to update the plugin's settings via the rtWLSSettings AJAX action because it uses a nonce for authorisation instead of a capability check...

CVE-2021-24742

The CVE-2021-24742 issue affects the WordPress plugin Logo Slider and Showcase (versions before 1.3.37). The underlying root cause is an authorization flaw: rtWLSSettings is protected by a nonce instead of a proper capability check, allowing Editor users to update plugin settings via an AJAX acti...

CVE-2021-24742 Logo Slider and Showcase < 1.3.37 - Editor Plugin's Settings Update

The Logo Slider and Showcase WordPress plugin before 1.3.37 allows Editor users to update the plugin's settings via the rtWLSSettings AJAX action because it uses a nonce for authorisation instead of a capability check...