CVE-2023-40200
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk9th percentile — higher than 9% of all known CVEs
Summary
CVE-2023-40200 is a vulnerability in the WP Logo Showcase Responsive Slider and Carousel plugin that allows authorization bypass through a user-controlled key. This issue affects versions from n/a to 3.6.
Risk Assessment
Organizations may be exposed to unauthorized access to plugin features, potentially leading to data disclosure or unauthorized changes in the system.
Recommendation
It is recommended to update the plugin to the latest version and review access control security configurations to minimize risk.
Original NVD description (English source)
Authorization bypass through User-Controlled key vulnerability in Essential Plugin WP Logo Showcase Responsive Slider and Carousel allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Logo Showcase Responsive Slider and Carousel: from n/a through 3.6.