CVE-2024-33542

CVE-2024-33542 affects Crelly Slider (WordPress plugin) up to version 1.4.5. It describes an Authorization Bypass Through User-Controlled Key vulnerability due to Insecure Direct Object References, enabling access to restricted resources by manipulating a key. The Wordfence vulnerability details ...

WordPress Crelly Slider Plugin <= 1.4.5 is vulnerable to Insecure Direct Object References (IDOR)

Software Crelly Slider Type Plugin Vulnerable versions = 1.4.5 Fixed in 1.4.6 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-33542 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f9ccd0dc8dcd Credits Steven Julian...