✕
Request a Demo
Rewterz
Multiple D-Link Products Vulnerabilities
September 3, 2024
Rewterz
Google Sheets Exploited by New Voldemort Malware to Store Stolen Data – Active IOCs
September 3, 2024

Multiple WordPress Carousel Slider Plugins Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2024-45270 CVSS:4.3

WordPress Carousel Slider plugin for WordPress is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to alter the contents of the WordPress site. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities.

CVE-2024-45269 CVSS:4.3

WordPress Carousel Slider plugin for WordPress is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to alter the contents of the WordPress site. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities.

Impact

  • Cross-Site Scripting

Indicators of Compromise

CVE

  • CVE-2024-45270
  • CVE-2024-45269

Affected Vendors

WordPress

Affected Products

  • Carousel Slider plugin for WordPress 2.2.0
  • Carousel Slider plugin for WordPress 1.10.2

Remediation

Upgrade to the latest version of Carousel Slider plugin for WordPress, available from the WordPress Plugin Directory.

CVE-2024-45270

CVE-2024-45269