PT-2025-21540 · WordPress · Logo Slider

Dmitry Ignatyev · Published 2025-05-15 · Updated 2025-05-15 · CVE-2024-9233

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Logo Slider WordPress plugin versions prior to 3.7.1

Description: The issue concerns the lack of CSRF check when updating settings, which could allow attackers to make a logged-in administrator change them via a CSRF attack. This could potentially be exploited by making the administrator perform unintended actions.

Recommendations: For Logo Slider WordPress plugin versions prior to 3.7.1, update to version 3.7.1 or later to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-9233

Affected Products

Logo Slider

References · 4

• 🔥 https://wpscan.com/vulnerability/a466cea4-0ae5-44a1-9e12-bd5dbecde2f2 · Exploit
• https://osv.dev/vulnerability/CVE-2024-9233 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-9233 · Security Note
• https://twitter.com/CVEnew/status/1923119294776528962 · Twitter Post