← CVE Intelligence

CVE-2024-5570

Simple Photoswipe <= 0.1 - Subscriber+ Arbitrary Settings Update PUBLISHED

Description (CNA)

The Simple Photoswipe WordPress plugin through 0.1 does not have authorisation check when updating its settings, which could allow any authenticated users, such as subscriber to update them

Affected (CNA)

Vendor / productVersions
Unknown / Simple Photoswipeaffected 0 through 0.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.