CVE Database /
CVE-2023-40200
CVE · Medium
CVE-2023-40200 — WP Logo Showcase Responsive Slider and Carousel [wp-logo-showcase-responsive-slider-slider] < 3.7 (closed)
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-40200
|
WP Logo Showcase Responsive Slider and Carousel [wp-logo-showcase-responsive-slider-slider] < 3.7 (closed) |
Authorization Bypass Through User-Controlled Key |
Medium
5.3
|
< 3.7
|
3.7 |
2023-08-16 |
—
|
CVE-2023-40200
The WP Logo Showcase Responsive Slider and Carousel plugin below version 3.7 contains a broken access control vulnerability that allows unauthenticated or low-privileged users to perform actions reserved for higher-privileged roles due to missing authorization checks, authentication validation, or nonce verification. Discovered by Abdi Pranata, this flaw remains unpatched with no fixed version currently available.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings