Threats tagged 'ghsa-f29w-gfrq-r578'

A missing authorization vulnerability exists in Product Gallery Slider & Additional Variation Images for WooCommerce versions 2.3.23 up to but not including 2.3.26. This flaw affects Codestar backup AJAX actions (csf-export, csf-import, csf-reset), allowing Shop Managers to exploit the csf_backup_nonce from the settings page and manipulate WordPress options arbitrarily, including wp_user_roles. This can lead to privilege escalation to administrator.