← Back

Slider Factory Pro

slider_factory_pro

Vendor: Wpfrank • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-6077
1Wpfrank
1Slider Factory Pro
Jun 17, 2026
Dec 18, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The Slider WordPress plugin before 3.5.12 does not ensure that posts to be accessed via an AJAX action are slides and can be viewed by the user making the request, allowing any authenticated users, such as subscriber to...Show more
The Slider WordPress plugin before 3.5.12 does not ensure that posts to be accessed via an AJAX action are slides and can be viewed by the user making the request, allowing any authenticated users, such as subscriber to access the content arbitrary post such as private, draft and password protectedShow less