WordPress Plugin Vulnerabilities

Slider <= 1.1.89 - Authenticated Arbitrary File Deletion

Description

The Image Slider WordPress plugin was affected by an Authenticated Arbitrary File Deletion security vulnerability.

Affects Plugins

Plugin icon
image-slider-widget
Fixed in 1.1.90

References

URL
https://advisories.dxw.com/advisories/arbitrary-file-deletion-vulnerability-in-image-slider-allows-authenticated-users-to-delete-files/
URL
https://seclists.org/fulldisclosure/2016/Dec/76

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
fbe95539-dd39-481c-9050-292ea5406653

Timeline

Publicly Published
2016-12-23 (about 9 years ago)
Added
2017-01-03 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2015-06-12
Title
Zip Attachments < 1.5 - Arbitrary File Download
Published
2024-11-20
Title
Lock User Account <= 1.0.5 - User Lock Bypass
Published
2020-02-25
Title
Flexible Checkout Fields for WooCommerce < 2.3.2 - Unauthenticated Settings Update
Published
2020-02-22
Title
CardGate < 3.1.16 - Unauthorised Payments Hijacking and Order Status Spoofing
Published
2014-09-17
Title
WP-Ban < 1.64 BlackList Bypass