CVE-2024-45269 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Carousel Slider WordPress plugin by Sayful Islam. An attacker could craft a malicious page that, when accessed by a logged-in WordPress user, could lead to unauthorized alteration of the website's content. The vulnerability has a CVSS score of 4.3 (Medium), indicating a low impact on integrity and no impact on confidentiality or availability. It requires user interaction (UI:R) and is of low complexity (AC:L), but does not require authentication (PR:N). Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.0CPE matchmatch criteria | cpe:2.3:a:majeedraza:carousel_slider:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.