CVE-2024-6490 Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion

2024-07-2606:00:04

WPScan

www.cve.org

cve-2024-6490

master slider

csrf

wordpress plugin

EPSS

Percentile

9.4%

JSON

During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delete all of the sliders inside Master Slider WordPress plugin through 3.9.10.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Master Slider",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "3.9.10"
      }
    ],
    "defaultStatus": "affected"
  }
]

References

wpscan.com/vulnerability/5a56e5aa-841d-4be5-84da-4c3b7602f053/

EPSS

Percentile

9.4%

JSON

Related for CVELIST:CVE-2024-6490