Critical severity9.6NVD Advisory· Published Oct 27, 2023· Updated Jun 17, 2026

CVE-2023-5820

Description

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the addedit functionality. This makes it possible for unauthenticated attackers to upload arbitrary files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/wp-responsive-slider-with-lightboxllm-create
Range: <1.0
WordPress/Thumbnail Slider With Lightboxllm-fuzzy
Range: <1.0
nik00726/Thumbnail Slider With Lightboxv5
Range: 1.0

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changesetnvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/e51e1cd2-6de9-4820-8bba-1c6b5053e2c1nvdThird Party Advisory
wordpress.org/plugins/wp-responsive-slider-with-lightboxnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000