PT-2024-12241 · WordPress · Easing Slider

Dave Jong · Published 2024-12-13 · Updated 2024-12-15 · CVE-2023-30490

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Easing Slider versions 3.0.8 and earlier

Description The issue affects the Easing Slider plugin, allowing exploitation of incorrectly configured access control security levels due to a missing authorization vulnerability. This can lead to plugin settings reset.

Recommendations For versions 3.0.8 and earlier, update to the latest version to secure your site and mitigate risks. As a temporary workaround, consider restricting access to the plugin settings until a patch is available.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2023-30490

Affected Products

Easing Slider

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-30490 · Security Note
• https://twitter.com/transilienceai/status/1868162675424801118 · Twitter Post
• https://twitter.com/transilienceai/status/1868162667833143552 · Twitter Post
• https://twitter.com/transilienceai/status/1867799385960030260 · Twitter Post
• https://twitter.com/transilienceai/status/1867799378628362592 · Twitter Post
• https://twitter.com/CVEnew/status/1868033897256440283 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/easing-slider/vulnerability/wordpress-easing-slider-plugin-3-0-8-plugin-settings-reset-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/easing-slider/vulnerability/wordpress-easing-slider-plugin-3-0-8-plugin-settings-reset-vulnerability?_s_id=cve · Note