Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-32402 EUVD-2026-11919GHSA-c67f-f43r-q9pr

WordPress Image Slider by Ays plugin <= 2.7.1 - Broken Access Control vulnerability

Published Mar 13, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Ays Pro Image Slider by Ays ays-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Slider by Ays: from n/a through <= 2.7.1.

Affected products

VendorProductAffectedFixed
Ays Pro Image Slider by Ays ≤ 2.7.1 —

References