Skip to content
Sign in
4.3 Medium

CVE-2024-10667 The Content Slider Block plugin for WordPress is vulnerable to Information Exposure in all versions up to, and…

Description

The Content Slider Block plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1.5 via the [csb] shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to.

Affected products and versions

Product Affected versions Fixed in
Content Slider Block 3.1 earliest → 3.1.5 No fix stated
Content Slider Block – Slide Through Text or Media Content 3.1 earliest → 3.1.5 No fix stated

Other CVEs of Content Slider Block

The 2 CVEs of Content Slider Block →
CVE-2026-116398 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Content… 6.5 Medium
Track this CVE