CVE-2026-120318
Received Received - Intake

Missing Authorization in Product Gallery Slider for WooCommerce

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: VulnCheck

Description
Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csf_backup_nonce from the settings page and supply arbitrary option names via the 'unique' parameter to read, overwrite or delete WordPress options, including modifying wp_user_roles to escalate to administrator.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-120318

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Codeixer Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a missing authorization issue in the Product Gallery Slider & Additional Variation Images for WooCommerce plugin versions 2.3.23 to 2.3.25. It allows Shop Managers to exploit AJAX actions (csf-export, csf-import, csf-reset) by reading a nonce value and manipulating WordPress options via the 'unique' parameter. This can lead to reading, overwriting, or deleting options, including modifying user roles to escalate privileges to administrator.

Detection Guidance

Check for unauthorized modifications to WordPress options by inspecting the wp_options table for changes to wp_user_roles or other critical settings. Review server logs for suspicious AJAX requests targeting csf-export, csf-import, or csf-reset actions. Use WordPress security plugins to monitor file integrity and unauthorized admin access.

Impact Analysis

If exploited, this vulnerability allows unauthorized users with Shop Manager privileges to escalate their access to administrator level. This could lead to full control over the WordPress site, including data theft, site defacement, or further compromise of the server. It may also allow reading sensitive WordPress options or deleting critical data.

Compliance Impact

This vulnerability could lead to unauthorized access and modification of sensitive data, violating GDPR's data protection principles and HIPAA's security requirements for protected health information. Unauthorized privilege escalation may result in data breaches, non-compliance with access control regulations, and potential legal penalties.

Mitigation Strategies

Update the Product Gallery Slider plugin to version 2.3.26 or later immediately. Remove Shop Manager capabilities to execute AJAX actions if not required. Implement strict file upload validation on your WordPress site to prevent arbitrary file execution. Monitor for signs of privilege escalation or unauthorized option changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-120318. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...