CVE-2021-24742

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p57

Published

Nov 1, 2021 (Nov 1, 2021)

Modified

Jun 17, 2026

Description

The Logo Slider and Showcase WordPress plugin before 1.3.37 allows Editor users to update the plugin's settings via the rtWLSSettings AJAX action because it uses a nonce for authorisation instead of a capability check.

Vendors: radiustheme
Products: logo slider and showcase
Ecosystems: WordPress
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.