CVE-2021-24742
01.11.2021, 09:15
The Logo Slider and Showcase WordPress plugin before 1.3.37 allows Editor users to update the plugin's settings via the rtWLSSettings AJAX action because it uses a nonce for authorisation instead of a capability check.Enginsight
| Vendor | Product | Version |
|---|---|---|
| radiustheme | logo_slider_and_showcase | 𝑥 < 1.3.37 |
𝑥
= Vulnerable software versions