WpvulndbWPVDB-ID:F893FD2D-D040-408A-A800-99BF02E32230Slider Revolution < 6.7.0 - Missing Authorization
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
9.2 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Description The Slider Revolution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the init_rest_api function in versions up to 6.7.0. This makes it possible for unauthenticated attackers to update slider data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 6.7.0 |
Related
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
9.2 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%