CVE-2026-120318

Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csfbackupnonce from the settings page and supply arbitrary opti...

CVE-2026-120318

The Product Gallery Slider & Additional Variation Images for WooCommerce plugin (versions 2.3.23 before 2.3.26 ) is vulnerable to a missing authorization flaw in the Codestar backup AJAX actions: csf-export, csf-import, and csf-reset. An attacker with Shop Manager privileges can retrieve the csf_...

CVE-2026-120318 Product Gallery Slider for WooCommerce 2.3.23 before 2.3.26 Missing Authorization via Codestar AJAX

Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csfbackupnonce from the settings page and supply arbitrary opti...

EUVD-2026-115233

Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csfbackupnonce from the settings page and supply arbitrary opti...