Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow <= 1.3.9 - Missing Authorization
mediumThe Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_media_slider and _ms_save_settings functions in versions up to, and including, 1.3.9. This makes it possible for authentica...
- CVSS:
- 4.3
- Affected:
- up to 1.3.9
- Fixed in:
- 1.4.0
- Disclosed:
- Jun 6, 2024