WordPress Content Slider Block CVE-2024-10667 Authenticated Authorization Bypass

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Content Slider Block - Create fully functional slider with Gutenberg block <= 3.1.5 - Authenticated (Contributor+) Post Disclosure 2. Vulnerability Type: Plugin 3. Plugin Name: content-slider-block 4. Plugin Version: <= 3.1.5 5. Plugin Status: Patched 6. Fixed Version: 3.1.6 7. Vulnerability Severity: Medium 8. Vulnerability Description: The plugin allows authorization bypass via a user-controlled key, allowing attackers with Contributor+ level access to extract data from password-protected, private, or draft posts. 9. Vulnerability Disclosure Date: November 8, 2024 10. Vulnerability Update Date: November 9, 2024 11. Researcher: Francesco Carlucci 12. Vulnerability ID: CVE-2024-10667 13. Vulnerability Score: 4.3 14. Vulnerability Disclosure Status: Public 15. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 16. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 17. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 18. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 19. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 20. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 21. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 22. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 23. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 24. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 25. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 26. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 27. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 28. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 29. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 30. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 31. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 32. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 33. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 34. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 35. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 36. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 37. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 38. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 39. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 40. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 41. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 42. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 43. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 44. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 45. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 46. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 47. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 48. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 49. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 50. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 51. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 52. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 53. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 54. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 55. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 56. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 57. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 58. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 59. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 60. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 61. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 62. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 63. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 64. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 65. Vulnerability Affected Scope: All versions of WordPress, including <= 3.1.5 66. Vulnerability Affected Sco

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Content Slider Block CVE-2024-10667 Authenticated Authorization Bypass