Medium · 5.4 CVE-2022-25608 EUVD-2022-30268GHSA-vp5x-r7c4-c29r

WordPress Yoo Slider – Image Slider & Video Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to slider Duplicate/Delete

Published Mar 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Yooslider Product: Yoo Slider – Image Slider & Video Slider (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers to trick authenticated users into unwanted slider duplicate or delete action.

Affected products

Vendor	Product	Affected	Fixed
Yooslider	Yoo Slider – Image Slider & Video Slider (WordPress plugin)	<= 2.0.0 – ≤ 2.0.0	—

References

https://wordpress.org/plugins/yoo-slider/#developers
https://patchstack.com/database/vulnerability/yoo-slider/wordpress-yoo-slider-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability-leading-to-slider-duplicate-delete