WordPress LayerSlider Plugin <= 4.6.1 - Remote Path Traversal File Access

This plugin is prone to a remote path traversal file access. It allows arbitrary code execution. Solution Update the plugin...

WordPress LayerSlider Plugin <= 4.6.1 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

WordPress LayerSlider插件跨站请求伪造漏洞

WordPress是一款内容管理系统。 由于应用程序允许用户通过未经验证的HTTP请求执行某些操作，攻击者可以利用漏洞欺骗管理员用户登录特制的网页，从而添加管理用户。 0 WordPress LayerSlider Plugin 4.x WordPress LayerSlider插件5.0.0版本以修复此漏洞，建议用户下载使用： http://wordpress.org/...

WordPress LayerSlider 4.6.1 CSRF / Traversal

========================================================== Wordpress plugin LayerSlider WP Version 4.6.1 Possible all versions suffers from CSRF And from Directory Traversal Vulnerabilities. AFAIK multiple wordpress themes uses this plugin. And one of them is satellite - v1.0.2 wordpress theme...

WordPress LayerSlider 4.6.1 CSRF / Traversal Vulnerabilities

WordPress LayerSlider plugin version 4.6.1 suffers from cross site request forgery and directory traversal vulnerabilities. ========================================================== Wordpress plugin LayerSlider WP Version 4.6.1 Possible all versions suffers from CSRF And from Directory Traversal...