PT-2025-21540 · WordPress · Logo Slider

·

CVE-2024-9233

·

Published

2025-05-15

·

Updated

2025-05-15

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Logo Slider WordPress plugin versions prior to 3.7.1
Description: The issue concerns the lack of CSRF check when updating settings, which could allow attackers to make a logged-in administrator change them via a CSRF attack. This could potentially be exploited by making the administrator perform unintended actions.
Recommendations: For Logo Slider WordPress plugin versions prior to 3.7.1, update to version 3.7.1 or later to resolve the issue.

Exploit

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-9233

Affected Products

Logo Slider