CVE-2026-120318
Product Gallery Slider for WooCommerce 2.3.23 before 2.3.26 Missing Authorization via Codestar AJAX
CVSS Score
7.2
EPSS Score
0.0%
EPSS Percentile
0th
Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csf_backup_nonce from the settings page and supply arbitrary option names via the 'unique' parameter to read, overwrite or delete WordPress options, including modifying wp_user_roles to escalate to administrator.
| CWE | CWE-862 |
| Vendor | codeixer |
| Product | product gallery slider & additional variation images for woocommerce |
| Published | Nov 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for codeixer product gallery slider & additional variation images for woocommerce
Be the first to know when new high vulnerabilities affecting codeixer product gallery slider & additional variation images for woocommerce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Codeixer / Product Gallery Slider & Additional Variation Images for WooCommerce
2.3.23 < 2.3.26
References
plugins.svn.wordpress.org: https://plugins.svn.wordpress.org/woo-product-gallery-slider/tags/2.3.26/includes/cdx-framework/functions/actions.php plugins.svn.wordpress.org: https://plugins.svn.wordpress.org/woo-product-gallery-slider/tags/2.3.25/includes/codestar/functions/actions.php plugins.svn.wordpress.org: https://plugins.svn.wordpress.org/woo-product-gallery-slider/tags/2.3.25/src/Options.php wordpress.org: https://wordpress.org/plugins/woo-product-gallery-slider/#developers downloads.wordpress.org: https://downloads.wordpress.org/plugin/woo-product-gallery-slider.2.3.26.zip vulncheck.com: https://www.vulncheck.com/advisories/product-gallery-slider-for-woocommerce-2.3.23-before-2.3.26-missing-authorization-via-codestar-ajax
Credits
Youssef Alaoui Hichami