CVE-2018-11579

MEDIO 5.3CVE-2018-11579 · Published 31/05/2018 · updated 17/06/2026

In breve

CVE-2018-11579 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda woocommerce category banner management (multidots).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.93%, superiore al 60.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
woocommerce category banner management multidots	`= 1.1.0`	No fix yet

Description

class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulnerability, related to certain wp_ajax_nopriv_ usage. Anyone can change the plugin's setting by simply sending a request with a wbm_save_shop_page_banner_data action.

References

labs.threatpress.com/unauthenticated-settings-change-vulnerability-in-woocommerce-category-banner-management-plugin · Exploit
wordpress.org/plugins/banner-management-for-woocommerce · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free