Post Grid, Post Carousel, & List Category Posts – by Smart Post Show, 98e123ac1a86723d620a2b959e6ecfa13513b410
- CVE, Research URL
- Home page URL
-
Security reports for Post Grid, Post Carousel, & List Category Posts – by Smart Post Show
- Published on
- Aug 16, 2021
- Research Description
- Smart Post Show – Post Grid, Post Carousel, Post Slider, Post Timeline, Post Table, and List Category Posts, Latest Posts, Recent Posts, Popular Posts and More [post-carousel] < 2.3.5 Post Carousel < 2.3.5 - Missing Capabilities Check The Post Carousel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on multiple functions in versions up to, and including, 2.3.4. This makes it possible for attackers to improperly access administrative actions.
- Affected versions
-
max 2.3.5.
- Status
-
vulnerable