Not rated
CVE-2021-24770 The Stylish Price List WordPress plugin before 6.9.1 does not perform capability checks in its spl_upload_ser_img AJAX…
Description
The Stylish Price List WordPress plugin before 6.9.1 does not perform capability checks in its spl_upload_ser_img AJAX action (available to authenticated users), which could allow any authenticated users, such as subscriber, to upload arbitrary images.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Stylish Price List 6.9 | earliest → < 6.9.1 | 6.9.1 |
Other CVEs of Stylish Price List
The 4 CVEs of Stylish Price List →
CVE-2024-7758
The Stylish Price List WordPress plugin before 7.1.8 does not sanitise and escape some of its settings, which could…
4.8
Medium
CVE-2024-10472
The Stylish Price List WordPress plugin before 7.1.12 does not sanitise and escape some of its settings, which could…
5.9
Medium
CVE-2021-24757
The Stylish Price List WordPress plugin before 6.9.0 does not perform capability checks in its spl_upload_ser_img AJAX…
Not rated