CVE-2026-42710
HighCVSS 7.6Summary
The Slider by 10Web (slider-wd) plugin contains a blind SQL injection vulnerability. The issue affects versions up to and including 1.2.63.
Risk Assessment
An attacker could exploit this to gain unauthorized access to the database, potentially leading to data leakage or modification.
Recommendation
Update the Slider by 10Web plugin to the latest available version that includes the fix.
Other vulnerabilities in Slider by 10Web
See all- CVE-2026-105885High
Slider by 10Web through version 1.2.62 contains a deserialization of untrusted data vulnerability that allows Object Injection. An attacker can exploit this to execute malicious code or manipulate application objects.
- CVE-2026-66635High
The Slider by 10Web plugin (versions up to 1.2.63) is vulnerable to Cross-Site Request Forgery (CSRF). An attacker can trick a logged-in user into performing unwanted actions within the application, such as changing slider settings.
Original NVD description (English source)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS