CVE-2023-5821

Summary

CVE-2023-5821 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Thumbnail carousel slider plugin for WordPress in version 1.0. This issue arises due to the absence of nonce validation on the "deleteselected" function, which allows unauthenticated attackers to delete multiple sliders in bulk. If a site administrator is tricked into performing a specific action, such as clicking on a malicious link, the attacker can leverage this vulnerability to execute unwanted deletions, potentially leading to data loss or other unwanted consequences.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.