Description
WordPress Plugin Logo Showcase with Slick Slider-Logo Carousel, Logo Slider & Logo Grid is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently change title, description, alt text, or URL of arbitrary uploaded media. WordPress Plugin Logo Showcase with Slick Slider-Logo Carousel, Logo Slider & Logo Grid version 1.2.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.2.5 or latest
References
Related Vulnerabilities
TYPO3 Improper Input Validation Vulnerability (CVE-2013-7079)
Oracle Database Server CVE-2014-4294 Vulnerability (CVE-2014-4294)
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3226)
Joomla! Core 1.5.x Information Disclosure (1.5.0 - 1.5.14)
Beego Framework CVE-2022-31259 Vulnerability (CVE-2022-31259)