CVE-2021-24739

CVE-2021-24739: Logo Carousel < 3.4.2 - Unauthorised Private Post Access

Vendor Unknown
Product Logo Carousel – Logo Slider, Logo Showcase, and Clients Logo Gallery
Weakness CWE-639 · IDOR
Published December 21, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other users via the Carousel Duplication feature

Key dates

02Disclosure timeline

December 21, 2021 CVE published
August 3, 2024 Record updated