CVE-2018-11579: Multidots Woocommerce Category Banner Management

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulnerability, related to certain wp_ajax_nopriv_ usage. Anyone can change the plugin's setting by simply sending a request with a wbm_save_shop_page_banner_data action.

Affected products

• Multidots Woocommerce Category Banner Management: version 1.1.0 only

Published 2018-05-31. Last modified 2026-06-17.