Media Slider Vulnerable to Missing Authorization
CVE-2024-35717

8.8HIGH

Key Information:

Vendor

WordPress
Status
Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow
Vendor
CVE Published:
10 June 2024

What is CVE-2024-35717?

A significant Missing Authorization vulnerability exists in A WP Life's Media Slider suite. This vulnerability affects various components, including the Photo Slider, Video Slider, Link Slider, and Carousel Slideshow, for versions before 1.3.9. An attacker exploiting this vulnerability may gain unauthorized access to restricted functionalities of the affected products. It is essential for users and administrators of these products to review their existing security measures and implement necessary updates to mitigate potential risks associated with this vulnerability. Regular patching and adherence to security best practices are crucial in maintaining the integrity and confidentiality of data handled by these media sliders.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow <= 1.3.9

References

https://patchstack.com/database/vulnerability/media-slide...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Steven Julian (Patchstack Alliance)
JSON
.