CVE-2026-3331

Name of the Vulnerable Software and Affected Versions Lobot Slider Administrator plugin for WordPress versions up to and including 0.6.0

Description The software is susceptible to Cross-Site Request Forgery (CSRF). This is caused by a lack of proper nonce validation within the fourty slider options page function. An unauthenticated attacker could potentially modify plugin slider-page configuration by deceiving a site administrator into performing an action, such as clicking a malicious link.

Recommendations Update the Lobot Slider Administrator plugin to a version newer than 0.6.0.