Slider Pro <= 4.8.6 is vulnerable to Broken Access Control vulnerability

Subscriber

Published
2023-09-04

The Slider Pro plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on several AJAX actions in versions up to, and including, 4.8.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to hide warnings.

CVE

https://www.cve.org/CVERecord?id=CVE-2023-41865

CVSS

Score:4.3

Severity:Medium

Version: 4.8.6

There is a patch available in v4.8.7 and we strongly recommend you update to this version as soon as possible.