WordPress Content Slider Block CVE-2024-10667 Authenticated Authorization Bypass

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Content Slider Block - Create fully functional slider with Gutenberg block <= 3.1.5 - Authenticated (Contributor+) Post Disclosure 2. Vulnerability Type: Plugin 3. Plugin Name: content-slider-block 4. Plugin Version: <= 3.1.5 5. Plugin Status: Patched 6. Fixed Version: 3.1.6 7. Vulnerability Severity: Medium 8. Vulnerability Description: The plugin allows authentication bypass via user-controlled keys, enabling attackers with Contributor+ level access to extract data from password-protected, private, or draft posts. 9. Vulnerability Disclosure Date: November 8, 2024 10. Vulnerability Update Date: November 9, 2024 11. Researcher: Francesco Carlucci 12. Vulnerability ID: CVE-2024-10667 13. Vulnerability Score: 4.3 14. Vulnerability Disclosure Status: Public 15. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 16. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 17. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 18. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 19. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 20. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 21. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 22. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 23. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 24. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 25. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 26. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 27. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 28. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 29. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 30. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 31. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 32. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 33. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 34. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 35. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 36. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 37. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 38. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 39. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 40. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 41. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 42. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 43. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 44. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 45. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 46. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 47. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 48. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 49. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 50. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 51. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 52. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 53. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 54. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 55. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 56. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 57. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 58. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 59. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 60. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 61. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 62. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 63. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 64. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 65. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 66. Vulnerability Impact Scope: All versions of WordPress, including <= 3.1.5 67. Vulnerability Impact Scope: All versions of WordPr

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Content Slider Block CVE-2024-10667 Authenticated Authorization Bypass

More from this source