Skip to content
OpenAdvisories

Product · GhozyLab

Image Slider

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication

    The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 due to failure to properly check for the existence of a nonce in the function ewic_duplicate_slider. This make it possible for unauthenticat…