WordPress Owl Carousel plugin <= 0.5.3 - Broken Access Control vulnerability

CVE-2022-44578

What is CVE-2022-44578?

A significant vulnerability exists in the Owl Carousel plugin developed by Pierre JEHAN, rooted in missing authorization mechanisms. This flaw allows attackers to exploit incorrectly configured access control settings, potentially leading to unauthorized access to sensitive features or information within the application. The affected versions span from n/a to 0.5.3, making it crucial for users of these versions to implement necessary security measures to mitigate risks associated with this issue.

References