CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects WordPress.
CVE
CVE-2018-11579
Severity
MEDIUM
CVSS
5.3
EPSS
0.95%
WordPress
Original NVD Description
class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulnerability, related to certain wp_ajax_nopriv_ usage. Anyone can change the plugin's setting by simply sending a request with a wbm_save_shop_page_banner_data action.
Related CVEs
Other vulnerabilities affecting the same vendor(s)