Skip to content
OpenAdvisories

Vendor

franchidesign

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-1405 Public exploit

    Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload

    The Slider Future plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'slider_future_handle_image_upload' function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated atta…