vSlider Multi Image Slider for WordPress <= 4.1.2 - Cross-Site Request Forgery

2023-07-1800:00:00

wpscan.com

wordpress

vslider

csrf

security

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

28.3%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.

References

patchstack.com/database/vulnerability/vslider/wordpress-vslider-multi-image-slider-for-wordpress-plugin-4-1-2-cross-site-request-forgery-csrf