PT-2026-2828 · WordPress · Responsive Accordion Slider
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Responsive Accordion Slider plugin for WordPress versions up to and including 1.2.2
Description
The plugin is susceptible to unauthorized data modification because of a missing capability check within the
resp accordion silder save images function. This allows authenticated attackers with Contributor-level access or higher to alter image metadata associated with any slider, including titles, descriptions, alt text, and links.Recommendations
Update the plugin to a version beyond 1.2.2.
Correção
Missing Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Responsive Accordion Slider