{"id":"CVE-2024-6490","aliases":["EUVD-2024-47575","GHSA-p63w-qrj3-j2r5"],"status":"published","title":"Master Slider – Responsive Touch Slider \u003c= 3.9.10 - CSRF to slider deletion","description":"During testing of the Master Slider  WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delete all of the sliders inside Master Slider  WordPress plugin through 3.9.10.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00228,"percentile":0.13626,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2024-07-26T06:00:04Z","modified":"2026-06-17T08:18:06Z","products":[{"vendor":"averta","product":"master slider"},{"vendor":"averta","product":"master_slider"},{"vendor":"unknown","product":"master slider"}],"references":[{"url":"https://wpscan.com/vulnerability/5a56e5aa-841d-4be5-84da-4c3b7602f053/","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6490"},{"url":"https://wpscan.com/vulnerability/5a56e5aa-841d-4be5-84da-4c3b7602f053"},{"url":"https://github.com/advisories/GHSA-p63w-qrj3-j2r5"}],"sources":{"cve":[{"id":"CVE-2024-6490","title":"Master Slider – Responsive Touch Slider \u003c= 3.9.10 - CSRF to slider deletion","description":"During testing of the Master Slider  WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delete all of the sliders inside Master Slider  WordPress plugin through 3.9.10.","status":"published","published":"2024-07-26T06:00:04.555Z","modified":"2024-08-01T21:41:03.422Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:34:11.638716Z"}],"euvd":[{"id":"EUVD-2024-47575","description":"During testing of the Master Slider  WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delete all of the sliders inside Master Slider  WordPress plugin through 3.9.10.","status":"published","published":"2024-07-26T06:00:04Z","modified":"2024-08-01T21:41:03Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T03:50:32.736279Z"}],"ghsa":[{"id":"GHSA-p63w-qrj3-j2r5","title":"During testing of the Master Slider  WordPress plugin through 3.9.10, a CSRF vulnerability was...","description":"During testing of the Master Slider  WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delete all of the sliders inside Master Slider  WordPress plugin through 3.9.10.","status":"published","published":"2024-07-26T06:30:48Z","modified":"2025-05-27T18:31:52Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:02:27.370745Z"}],"nvd":[{"id":"CVE-2024-6490","description":"During testing of the Master Slider  WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delete all of the sliders inside Master Slider  WordPress plugin through 3.9.10.","status":"published","published":"2024-07-26T06:15:02.927Z","modified":"2026-06-17T08:18:06.777Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:10:14.437386Z"}]}}