PT-2024-12241 · WordPress · Easing Slider

·

CVE-2023-30490

·

تاريخ النشر

2024-12-13

·

تاريخ التحديث

2024-12-15

CVSS v3.1

7.5

عالية

المتجهAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Easing Slider versions 3.0.8 and earlier
Description The issue affects the Easing Slider plugin, allowing exploitation of incorrectly configured access control security levels due to a missing authorization vulnerability. This can lead to plugin settings reset.
Recommendations For versions 3.0.8 and earlier, update to the latest version to secure your site and mitigate risks. As a temporary workaround, consider restricting access to the plugin settings until a patch is available.

إصلاح

Missing Authorization

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

CVE-2023-30490

المنتجات المتأثرة

Easing Slider