Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24739

Logo Carousel < 3.4.2 - Unauthorised Private Post Access

Description

The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other users via the Carousel Duplication feature

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Logo Carousel – Logo Slider, Logo Showcase, and Clients Logo Gallery

  • 3.4.2 to < 3.4.2affected

References