WordPress Carousel Slider plugin <= 2.2.2 - Broken Access Control vulnerability
CVE-2023-41848

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Carousel Slider
Vendor
CVE Published:
13 December 2024

What is CVE-2023-41848?

A security flaw has been identified in the Majeed Raza Carousel Slider plugin due to missing authorization, which leads to incorrectly configured access control security levels. This vulnerability can allow unauthorized individuals to exploit the system, potentially compromising sensitive information and affecting the overall security of websites utilizing this plugin. It is essential for users of Carousel Slider to review and secure their access control configurations to mitigate potential risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Carousel Slider <= 2.2.2

References

https://patchstack.com/database/wordpress/plugin/carousel...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Anh Tien (Patchstack Alliance)
JSON
.