### [CVE-2024-1745](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1745)
![](https://img.shields.io/static/v1?label=Product&message=Testimonial%20Slider&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%202.3.7%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-863%20Incorrect%20Authorization&color=brighgreen)

### Description

The Testimonial Slider WordPress plugin before 2.3.7 does not properly ensure that a user has the necessary capabilities to edit certain sensitive Testimonial Slider WordPress plugin before 2.3.7 settings, making it possible for users with at least the Author role to edit them.

### POC

#### Reference
- https://wpscan.com/vulnerability/b63bbfeb-d6f7-4c33-8824-b86d64d3f598/

#### Github
No PoCs found on GitHub currently.