Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-48334 EUVD-2025-16468GHSA-xmqw-mq56-x22h

WordPress Woo Slider Pro <= 1.12 - Arbitrary Content Deletion Vulnerability

Published May 30, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro woo-slider-pro-drag-drop-slider-builder-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through <= 1.12.

Affected products

VendorProductAffectedFixed
BinaryCarpenter Woo Slider Pro ≤ 1.12 —

References