Ultimate Responsive Image Slider <= 3.5.11 - Missing Authorization via AJAX action
mediumThe Slider – Ultimate Responsive Image Slider plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax_get_thumbnail_uris function in all versions up to 3.5.11 (inclusive). This makes it possible for subscriber-level attackers to access the meta-information associa...
- CVSS:
- 4.3
- Affected:
- up to 3.5.11
- Fixed in:
- 3.5.12
- Disclosed:
- Nov 16, 2023