Lucene search

K
wpvulndbWpvulndbWPVDB-ID:F0FE19E7-15A7-4275-A44A-99F350AADE44
HistoryJan 04, 2024 - 12:00 a.m.

Slider by Soliloquy < 2.7.3 - Subscriber+ Slider Data Access

2024-01-0400:00:00
wpscan.com
4
wordpress
vulnerability
data access
authentication
subscriber level

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Description The Slider by Soliloquy plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on a function in versions up to, and including, 2.7.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to view draft slider data.

CPENameOperatorVersion
eq2.7.3

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:F0FE19E7-15A7-4275-A44A-99F350AADE44