Lucene search
JpcertVULNRICHMENT:CVE-2024-45270HistorySep 01, 2024 - 11:55 p.m.
CVE-2024-45270
2024-09-0123:55:28
jpcert
github.com
wordpress
carousel slider
cross-site request forgery
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
21.3%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
WordPress plugin “Carousel Slider” provided by Sayful Islam contains a cross-site request forgery vulnerability on Hero image selection feature. While logged in to the WordPress site with Carousel Slider plugin enabled, accessing a crafted page may cause a user to alter the contents of the WordPress site.
Related
nvd
nvd
CVE-2024-45270
2024-09-02 00:15:11
cvelist
cvelist
CVE-2024-45270
2024-09-01 23:55:28
cve
cve
CVE-2024-45270
2024-09-02 00:15:11
jvn
jvn
JVN#25264194: Multiple vulnerabilities in WordPress plugin "Carousel Slider"
2024-08-30 00:00:00
wordfence
wordfence
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
21.3%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-45270