8.8
Élevée
CVE-2025-8418 The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all…
Description
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions up to, and including, 1.1.30. This is due to missing capability checks on the activated_plugin function. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins on the server which can make remote code execution possible.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| B Slider- Gutenberg Slider Block for WP 1.1 | premières → 1.1.30 | Pas de correctif indiqué |
| bSlider – Create Responsive Image, Post, Product, and Video Sliders 1.1 | premières → 1.1.30 | Pas de correctif indiqué |
Autres CVE de B Slider- Gutenberg Slider Block for WP
Les 4 CVE de B Slider- Gutenberg Slider Block for WP →
CVE-2025-8680
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Server-Side Request Forgery in version…
4.3
Moyenne
CVE-2025-8676
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in…
4.3
Moyenne
CVE-2024-13514
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Information Exposure in all versions…
4.3
Moyenne