CVE-2025-15491
Essential information
- Published
- 07/02/2026 06:16
- Modified
- 07/02/2026 06:16
- Author
- —
- Creator
- —
- CISA KEV
- No
- CWE
- —
- CVSS vector
- — — —
Description
The Post Slides WordPress plugin through 1.0.1 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as with contributor or higher roles to perform LFI attacks
NVD status
- Status
- Received — CVE has been recently published to the CVE List and has been received by the NVD.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| wordpress / post slides | cpe:2.3:a:wordpress:post_slides:1.0.1:*:*:*:*:*:*:* |
| wordpress / wordpress | cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:* |