CVE-2023-22672

CVE-2023-22672 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Mr.Vibe vSlider Multi Image Slider for WordPress (plugin slug vslider) affecting versions 4.1.2 when a patch is available from the vendor or plugin repository or monitor for an official fix.

WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software vSlider Multi Image Slider for WordPress Type Plugin Vulnerable versions = 4.1.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-22672 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ebfb8daaae94...

WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Scripting (XSS)

Software vSlider Multi Image Slider for WordPress Type Plugin Vulnerable versions = 4.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25797 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7d1d8d3cc565 Credits...