Vulnerability · Published Jul 26, 2024 · Assigned by WPScan
CVE-2024-6490Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion
Medium 6.5
In plain English
A medium-severity security flaw in Master Slider from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.2%top 86.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delete all of the sliders inside Master Slider WordPress plugin through 3.9.10.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Master Slider | 0 – through 3.9.10 |
References
- https://wpscan.com/vulnerability/5a56e5aa-841d-4be5-84da-4c3b7602f053/ exploit, vdb-entry, technical-description