CVE-2025-62153
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Quick Interest Slider plugin (versions up to 3.1.7) contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. An unauthorized user can perform actions reserved for privileged roles.
Risk Assessment
An attacker could bypass access control and perform unauthorized operations, potentially resulting in content modification or data disclosure on the WordPress site.
Recommendation
Update the Quick Interest Slider plugin to a version newer than 3.1.7 or review and correct user permissions.
Other vulnerabilities in Quick Interest Slider
See all- CVE-2026-56039High
The vulnerability allows an unauthenticated attacker to perform XSS attacks in Quick Interest Slider versions up to and including 3.1.6.
- CVE-2025-64237Medium
The Quick Interest Slider plugin (versions up to and including 3.1.5) contains a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this to perform unauthorized operations in the context of a logged-in user.
Original NVD description (English source)
Missing Authorization vulnerability in Graham Quick Interest Slider quick-interest-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Interest Slider: from n/a through <= 3.1.7.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS