Chuckmo Lobot Slider Administrator vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Chuckmo Lobot Slider Administrator: 1 record(s), with affected versions and fixes.
CVE-2026-3331
Medium · 4.3
CWE-352 Mar 21, 2026
Lobot Slider Administrator <= 0.6.0 - Cross-Site Request Forgery to Settings Update
The Lobot Slider Administrator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.0. This is due to missing or incorrect nonce validation on the fourty_slider_options_page function. This makes it possible for unauthenticated attackers to modify plugin slider-page configuration via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.