CVE-2025-4597

CVE-2025-4597 affects the WordPress plugin “Woo Slider Pro – Drag Drop Slider Builder For WooCommerce” up to version 1.12. The root cause is a missing capability check on the woo_slide_pro_delete_draft_preview AJAX action, enabling authenticated attackers with Subscriber-level access or higher to...

CVE-2025-4597 Woo Slider Pro - Drag Drop Slider Builder For WooCommerce <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooslideprodeletedraftpreview AJAX action in all versions up to, and including, 1.12. This makes it possible for...

WordPress Woo Slider Pro - Drag Drop Slider Builder For WooCommerce plugin <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via woo_slide_pro_delete_draft_preview vulnerability

WordPress Woo Slider Pro - Drag Drop Slider Builder For WooCommerce plugin = 1.12 - Missing Authorization to Authenticated Subscriber+ Arbitrary Post Deletion via wooslideprodeletedraftpreview vulnerability discovered by Chuck in WordPress Plugin Woo Slider Pro versions = 1.12...