EUVD-2016-10886

🗓️ 15 Jun 2026 12:00:43Reported by EUVDType

WordPress Lazy Content Slider Plugin 3.4 has CSRF allowing attackers to force admins to change plugin settings.

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2016-20074	15 Jun 202612:00	–	cve
Cvelist	CVE-2016-20074 WordPress Lazy Content Slider Plugin 3.4 CSRF	15 Jun 202612:00	–	cvelist
NVD	CVE-2016-20074	15 Jun 202614:16	–	nvd
Positive Technologies	PT-2026-49212	15 Jun 202600:00	–	ptsecurity
Vulnrichment	CVE-2016-20074 WordPress Lazy Content Slider Plugin 3.4 CSRF	15 Jun 202612:00	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "7db56abb-964b-3a10-9821-056ba9d5d11d",
        "vendor": {
          "name": "leethompson"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "27463ae8-b2e8-35d6-80f2-18a67f13d037",
        "product": {
          "name": "Lazy Content Slider Plugin",
          "vendor": {
            "name": "leethompson"
          }
        },
        "product_version": "3.4"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/40070
vulncheck	www.vulncheck.com/advisories/wordpress-lazy-content-slider-plugin-csrf

15 Jun 2026 16:34Current

5.1Medium risk

Vulners AI Score5.1

CVSS 45.3

CVSS 3.14.3

SSVC