← Database

CVE-2024-5570

MEDIUM CVSS: 6.5 Published: 2024-06-28 Modified: 2026-06-17

Description

The Simple Photoswipe WordPress plugin through 0.1 does not have authorisation check when updating its settings, which could allow any authenticated users, such as subscriber to update them

Affected Platforms

Zitscher Simple Photoswipe

Weakness Type

CWE-862

References