| Package | Affected versions | Patched versions |
|---|---|---|
| woocommerce category banner management | = 1.1.0 |
class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulnerability, related to certain wp_ajax_nopriv_ usage. Anyone can change the plugin's setting by simply sending a request with a wbm_save_shop_page_banner_data action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free