TI-2026-01103 CVE-2026-1405 · GHSA-qq55-xggh-hmxg
Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload
Priority MEDIUM 55
The Slider Future plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'slider_future_handle_image_upload' function in all versions up to, and including, 1.0.5.