Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/03 12:00 a.m.•10 views

CVE-2025-4188: Cross-Site Request Forgery (CSRF)

The Advanced Reorder Image Text Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'reorder-simple-image-text-slider-setting' page. This makes it possible for unauthenticate...

6.1CVSS8AI score0.00177EPSS
SaveExploits0References1
Rows per page
Query Builder