PT-2026-25248 · Ays Pro · Image Slider By Ays

Nabil Irawan · CVE-2026-32402 · Publicado 2026-03-13 · Atualizado 2026-03-14

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ays Pro Image Slider versions through 2.7.1

Description An authorization issue exists in Ays Pro Image Slider by Ays. The issue involves exploiting incorrectly configured access control security levels.

Recommendations Update Ays Pro Image Slider to a version later than 2.7.1.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-32402

Produtos afetados

Image Slider By Ays

Referências · 3

• https://patchstack.com/database/Wordpress/Plugin/ays-slider/vulnerability/wordpress-image-slider-by-ays-plugin-2-7-1-broken-access-control-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/2032831450073231535 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-32402 · Nota de Segurança