CVE-2024-1745: Testimonial Slider < 2.3.7 - Author+ Settings Update
The Testimonial Slider WordPress plugin before 2.3.7 does not properly ensure that a user has the necessary capabilities to edit certain sensitive Testimonial Slider WordPress plugin before 2.3.7 settings, making it possible for users with at least the Author role to edit them.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1745?
CVE-2024-1745 has a moderate severity due to incorrect capability checks allowing potentially unauthorized users to edit sensitive plugin settings.
How do I fix CVE-2024-1745?
To fix CVE-2024-1745, update the Testimonial Slider WordPress plugin to version 2.3.7 or later.
Who is affected by CVE-2024-1745?
Users with the Author role in WordPress installations using the Testimonial Slider plugin before version 2.3.7 are affected by CVE-2024-1745.
What does CVE-2024-1745 exploit?
CVE-2024-1745 exploits improper capability checks that allow users to modify settings without the necessary permissions.
Is there a workaround for CVE-2024-1745?
A temporary workaround for CVE-2024-1745 is to restrict user roles and permissions until the plugin is updated.