PT-2025-50092 · WordPress · Slider A Sliderspack

Published 2025-12-09 · Updated 2025-12-14 · CVE-2022-46845

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Slider a SlidersPack versions prior to 2.3 Slider a SlidersPack version 2.0.2

Description An issue exists in Essential Plugin Slider a SlidersPack related to incorrectly configured access control security levels, allowing exploitation due to missing authorization.

Recommendations Update Slider a SlidersPack to version 2.3 or later. Update Slider a SlidersPack to version 2.0.3 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-46845

Affected Products

Slider A Sliderspack

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-46845 · Security Note
• https://t.me/CVEtracker/39276 · Telegram Post
• https://vdp.patchstack.com/database/wordpress/plugin/sliderspack-all-in-one-image-sliders/vulnerability/wordpress-slider-a-sliderspack-image-slider-post-slider-acf-gallery-slider-plugin-2-0-2-broken-access-control?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2000248693535195521 · Twitter Post