Slideshow Gallery LITE, 75b6ebd530e86cfd8b60f44fd92b844693be687e

CVE, Research URL: 75b6ebd530e86cfd8b60f44fd92b844693be687e
Home page URL: Security reports for Slideshow Gallery LITE
Application: Slideshow Gallery LITE
Published on: Mar 15, 2023
Research Description: Slideshow Gallery LITE [slideshow-gallery] < 1.7.7 Slideshow Gallery LITE <= 1.7.6 - Cross-Site Request Forgery via admin_slides The Slideshow Gallery LITE plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6. This is due to missing or incorrect nonce validation on the admin_slides function. This makes it possible for unauthenticated attackers to delete slides via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.7.7.
Status: vulnerable