Slider by 10Web vulnerabilities

Slider by 10Web through version 1.2.62 contains a deserialization of untrusted data vulnerability that allows Object Injection. An attacker can exploit this to execute malicious code or manipulate application objects.

The Slider by 10Web (slider-wd) plugin contains a blind SQL injection vulnerability. The issue affects versions up to and including 1.2.63.

The Slider by 10Web plugin (versions up to 1.2.63) is vulnerable to Cross-Site Request Forgery (CSRF). An attacker can trick a logged-in user into performing unwanted actions within the application, such as changing slider settings.