VYPR

2j Slideshow

by 2joomla

CVEs (1)

  • CVE-2020-36729MedJun 7, 2023
    risk 0.35cvss 5.4epss 0.01

    The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'twoj_slideshow_setup' function called via the wp_ajax_twoj_slideshow_setup AJAX action in versions up to, and including, 1.3.31. This makes it possible for…