Lucene search
+L

Logo Carousel < 3.4.2 - Unauthorised Private Post Access

🗓️ 22 Nov 2021 00:00:00Reported by apple502jType 
wpexploit
 wpexploit
👁 147 Views

Logo Carousel < 3.4.2 - Unauthorised Private Post Access. Shortcode Generator and Post Duplication Vulnerabilit

Related
Code
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2021-24739
21 Dec 202109:15
attackerkb
circl
Circl
CVE-2021-24739
21 Dec 202112:25
circl
cnnvd
CNNVD
WordPress 插件授权问题漏洞
21 Dec 202100:00
cnnvd
cnvd
CNVD
WordPress Logo Carousel plugin licensing issues vulnerability
26 Dec 202100:00
cnvd
cve
CVE
CVE-2021-24739
21 Dec 202108:45
cve
cvelist
Cvelist
CVE-2021-24739 Logo Carousel < 3.4.2 - Unauthorised Private Post Access
21 Dec 202108:45
cvelist
euvd
EUVD
EUVD-2021-11651
7 Oct 202500:30
euvd
nvd
NVD
CVE-2021-24739
21 Dec 202109:15
nvd
osv
OSV
CVE-2021-24739
21 Dec 202109:15
osv
patchstack
Patchstack
WordPress Logo Carousel plugin <= 3.4.1 - Unauthorized Private Post Access vulnerability
22 Nov 202100:00
patchstack
Rows per page
1) Go to Logo Carousel -> Shortcode Generator.
2) If there is no carousel, create one.
3) Copy URL of the "Duplicate" link under the carousel item.
4) Replace "post" parameter with the post ID of a private post.
5) Visit the link.
6) The private post is duplicated. The post can be viewed at Posts -> All Posts.

e.g: https://example.com/wp-admin/admin.php?action=sp_lc_shortcode_duplicate&post=1764&sp_lc_duplicate_nonce=1c00367003

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Nov 2021 08:32Current
0.6Low risk
Vulners AI Score0.6
CVSS 25.5
CVSS 3.18.1
EPSS0.01006
147