CVE-2024-45270

—

CVSS 3.1

4.3 medium

EPSS

<1%p14

Published

Sep 2, 2024 (Sep 2, 2024)

Modified

Jun 17, 2026

Description

WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Hero image selection feature. While logged in to the WordPress site with Carousel Slider plugin enabled, accessing a crafted page may cause a user to alter the contents of the WordPress site.

Vendors: majeedraza
Products: carousel slider
Ecosystems: WordPress
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.