The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google Places configuration…
The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google Places configuration, allowing attackers to alter or destroy that configuration via a forged request, provided they can trick a site administrator into following a crafted link.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Product
- WP Google Review Slider
- Exposure class
- Web platform
- NVD status
- Received
Why it ranks 26 (Notable)
- Product class: web platform
- Widely deployed vendor product (Google)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.