CVE-2024-3020: Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injection
The plugin is vulnerable to PHP Object Injection in versions up to and including, 2.6.3 via deserialization of untrusted input in the import function via the 'shortcode' parameter. This allows authenticated attackers, with administrator-level access to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3020?
CVE-2024-3020 is classified as a high severity vulnerability due to its potential to allow PHP Object Injection for authenticated administrators.
How do I fix CVE-2024-3020?
To fix CVE-2024-3020, update the plugin to version 2.6.4 or later, which addresses the PHP Object Injection issue.
What versions are affected by CVE-2024-3020?
CVE-2024-3020 affects all versions of the plugin up to and including 2.6.3.
Who is impacted by CVE-2024-3020?
Authenticated users with administrator-level access to the plugin are most at risk from CVE-2024-3020.
What type of vulnerability is CVE-2024-3020?
CVE-2024-3020 is a PHP Object Injection vulnerability caused by the deserialization of untrusted input.