CVE-2021-24742

6.5 mediumEPSS 0.9%

Medium (6.5) in radiustheme logo slider and showcase. EPSS 0.9% chance of exploitation in the next 30 days.

The Logo Slider and Showcase WordPress plugin before 1.3.37 allows Editor users to update the plugin's settings via the rtWLSSettings AJAX action because it uses a nonce for authorisation instead of a capability check.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2021-11-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

radiustheme:logo_slider_and_showcase

References

https://wpscan.com/vulnerability/8dfc86e4-56a0-4e30-9050-cf3f328ff993
https://wpscan.com/vulnerability/8dfc86e4-56a0-4e30-9050-cf3f328ff993

Check your stack JSON