7 matches found
CVE-2026-120318
Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csfbackupnonce from the settings page and supply arbitrary opti...
EUVD-2026-115233
Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csfbackupnonce from the settings page and supply arbitrary opti...
CVE-2026-120318 Product Gallery Slider for WooCommerce 2.3.23 before 2.3.26 Missing Authorization via Codestar AJAX
Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csfbackupnonce from the settings page and supply arbitrary opti...
CVE-2026-120318 Product Gallery Slider for WooCommerce 2.3.23 before 2.3.26 Missing Authorization via Codestar AJAX
Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csfbackupnonce from the settings page and supply arbitrary opti...
CVE-2026-120318
The Product Gallery Slider & Additional Variation Images for WooCommerce plugin (versions 2.3.23 before 2.3.26 ) is vulnerable to a missing authorization flaw in the Codestar backup AJAX actions: csf-export, csf-import, and csf-reset. An attacker with Shop Manager privileges can retrieve the csf_...
PT-2026-135440
Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csf backup nonce from the settings page and supply arbitrary...
CVE-2026-120318: Codeixer Product Gallery Slider & Additional Variation Images for WooCommerce: Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing…
Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csfbackupnonce from the settings page and supply arbitrary opti...