Testimonial Carousel For Elementor, CVE-2024-4858

CVE, Research URL: CVE-2024-4858
Home page URL: Security reports for Testimonial Carousel For Elementor
Application: Testimonial Carousel For Elementor
Published on: May 25, 2024
Research Description: The Testimonial Carousel For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_testimonials_option_callback' function in versions up to, and including, 10.2.0. This makes it possible for unauthenticated attackers to update the OpenAI API key, disabling the feature.
Affected versions: max 10.2.1.
Status: vulnerable