CVE-2024-1745

The Testimonial Slider WordPress plugin before 2.3.7 does not properly ensure that a user has the necessary capabilities to edit certain sensitive Testimonial Slider WordPress plugin before 2.3.7 settings, making it possible for users with at least the Author role to edit them.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

0.38% chance of exploitation in the next 30 days, 31th percentile

Published

2024-03-26

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/b63bbfeb-d6f7-4c33-8824-b86d64d3f598/

References

• CVE Record
• NVD entry

Related

• CVE-2024-1743
• CVE-2024-1746
• CVE-2024-1736
• CVE-2024-1747
• CVE-2024-1728
• CVE-2024-1748