WordPress CrossSlide jQuery Plugin <= 2.0.5 - Multiple CSRF

Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that change plugin settings or conduct cross-site scripting (XSS) attacks via the several parameters (“csj_fade”, “csj_sleep”, “csj_width”, “upload_image”, “csj_height”) in in the thisismyurl_csj.php page to wp-admin/options-general.php.

Solution

           Upgrade the plugin.