WordPress Plugin Vulnerabilities

Woocommerce Category Banner Management <= 1.1.0 - Unauthenticated Settings Change

Description

The WooCommerce Banner and Carousel Slider for Category, Page WordPress plugin was affected by an Unauthenticated Settings Change security vulnerability.

Affects Plugins

Plugin icon
banner-management-for-woocommerce
Fixed in 1.1.1

References

CVE
CVE-2018-11579

Classification

Type
PRIVESC
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-269
CVSS
5.3 (medium)

Miscellaneous

Verified
No
WPVDB ID
8fb21372-48d2-4ad4-806a-83c9c3f4e69d

Timeline

Publicly Published
2018-05-29 (about 7 years ago)
Added
2019-08-21 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-02-10
Title
WP Foodbakery < 4.8 - Unauthenticated Privilege Escalation in foodbakery_registration_validation
Published
2017-08-01
Title
WP Support Plus Responsive Ticket System < 8.0.0 - Privilege Escalation
Published
2025-05-30
Title
WPCHURCH <= 2.7.0 - Subscriber+ Privilege Escalation
Published
2024-09-17
Title
Webo-facto < 1.41 - Unauthenticated Privilege Escalation
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Unauthenticated Privilege Escalation