CVE-2018-11579

The CVE-2018-11579 entry concerns the WordPress plugin MULTIDOTS WooCommerce Category Banner Management (version 1.1.0). The vulnerability is an Unauthenticated Settings Change via wp_ajax_nopriv_ usage, allowing an attacker to change plugin settings by sending a request with the wbm_save_shop_pa...