PT-2024-37664 · WordPress · Master Slider

Dmitry Ignatyev · Published 2024-07-26 · Updated 2024-08-01 · CVE-2024-6490

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Master Slider WordPress plugin versions 3.9.10 and earlier

Description A CSRF issue was discovered, allowing unauthorized users to manipulate requests on behalf of the victim, potentially deleting all sliders inside the Master Slider WordPress plugin.

Recommendations For Master Slider WordPress plugin versions 3.9.10 and earlier, update to a version later than 3.9.10 to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-6490

Affected Products

Master Slider

References · 5

• 🔥 https://wpscan.com/vulnerability/5a56e5aa-841d-4be5-84da-4c3b7602f053 · Exploit
• https://osv.dev/vulnerability/CVE-2024-6490 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6490 · Security Note
• https://t.me/cvedetector/1671 · Telegram Post
• https://t.me/cvenotify/87513 · Telegram Post