Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-6490 EUVD-2024-47575GHSA-p63w-qrj3-j2r5

Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion

Published Jul 26, 2024 · Updated Aug 1, 2024 · Assigned by WPScan

Description

During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delete all of the sliders inside Master Slider WordPress plugin through 3.9.10.

Affected products

VendorProductAffectedFixed
— Master Slider ≤ 3.9.10 —

References