VULNERABILITY INTELLIGENCE
CVE-2024-1745
CVSS score4.3 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2024-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
The Testimonial Slider WordPress plugin before 2.3.7 does not properly ensure that a user has the necessary capabilities to edit certain sensitive Testimonial Slider WordPress plugin before 2.3.7 settings, making it possible for users with at least the Author role to edit them.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- contact@wpscan.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory