CVE-2026-66635

HighCVSS 7.4

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Unauthenticated CSRF vulnerability in Slider by 10Web versions up to 1.2.62. An attacker can exploit this to perform unwanted actions in the context of a logged-in administrator.

Risk Assessment

Risk of unauthorized changes to slider configuration or other administrative actions, potentially leading to site compromise.

Recommendation

Update the Slider by 10Web plugin to the latest patched version.

Original NVD description (English source)

Unauthenticated Cross Site Request Forgery (CSRF) in Slider by 10Web <= 1.2.62 versions.