CVE-2025-11992

CVE-2025-11992 (Multi Item Responsive Slider, WordPress) The WordPress plugin is vulnerable to Cross-Site Request Forgery that can lead to a stored Cross-Site Scripting via the mioptions.php page. Public disclosures confirm missing/incorrect nonce validation across versions

CVE-2025-11992 Multi Item Responsive Slider <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Multi Item Responsive Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'mioptions.php' page. This makes it possible for unauthenticated attackers to update settings an...

PT-2025-43596

Name of the Vulnerable Software and Affected Versions Multi Item Responsive Slider plugin for WordPress versions prior to 1.1 Description The software is susceptible to Cross-Site Request Forgery CSRF due to missing or incorrect nonce validation on the mioptions.php page. This allows...