PT-2026-2191 · WordPress · Wptexture Image Slider Slideshow

Nabil Irawan · Published 2026-01-08 · Updated 2026-01-08 · CVE-2026-22489

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Wptexture Image Slider Slideshow versions through 1.8

Description An authorization bypass exists due to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue involves a user-controlled key. No information is available regarding the number of potentially affected devices or any real-world exploitation of this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-22489

Affected Products

Wptexture Image Slider Slideshow

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-22489 · Security Note
• https://patchstack.com/database/wordpress/plugin/image-slider-slideshow/vulnerability/wordpress-image-slider-slideshow-plugin-1-8-insecure-direct-object-references-idor-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2009336830638825773 · Twitter Post
• https://twitter.com/CVEnew/status/2009308273392976116 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/image-slider-slideshow/vulnerability/wordpress-image-slider-slideshow-plugin-1-8-insecure-direct-object-references-idor-vulnerability?_s_id=cve · Note