Shapedplugin Logo Carousel
2 CVEs affecting Shapedplugin Logo Carousel. Latest disclosed: 2021-12-21. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24739 | High | 8.1 | 2021-12-21 | The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other user… |
CVE-2021-24738 | Medium | 5.4 | 2021-12-21 | The Logo Carousel WordPress plugin before 3.4.2 does not validate and escape the "Logo Margin" carousel option, which could allow users with a role as low as C… |