Vendor
franchidesign
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.8CVE-2026-1405 Public exploit
Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload
The Slider Future plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'slider_future_handle_image_upload' function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated atta…