CVE-2018-11579

Published: 2018-05-31T01:29Z

Last Modified: 2024-11-21T03:43Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulnerability, related to certain wp_ajax_nopriv_ usage. Anyone can change the plugin's setting by simply sending a request with a wbm_save_shop_page_banner_data action. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt