CVE-2024-6490

Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion

Medium · published July 26, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delete all of the sliders inside Master Slider WordPress plugin through 3.9.10.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Published
2024-07-26T06:00Z
EPSS history
Timeline
  • 26 JUL 06:00Z
    Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion
    cvelistv5