WordPress Plugin Vulnerabilities
Slideshow 2.2.8-2.2.21 - Option Value Disclosure
Description
The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function,
accessible by unauthenticated users as an AJAX action, can be abused
to force the disclosure of arbitrary Wordpress option values.
Affects Plugins
Fixed in 2.2.22 References
Miscellaneous
Submitter
ethicalhack3r
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2015-05-02 (about 11 years ago)
Added
2015-05-03 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)
WPScan 