WordPress Carousel Slider plugin <= 2.2.2 - Broken Access Control vulnerability

CVE-2023-41848

Summary

A security flaw has been identified in the Majeed Raza Carousel Slider plugin due to missing authorization, which leads to incorrectly configured access control security levels. This vulnerability can allow unauthorized individuals to exploit the system, potentially compromising sensitive information and affecting the overall security of websites utilizing this plugin. It is essential for users of Carousel Slider to review and secure their access control configurations to mitigate potential risks associated with this vulnerability.

References