CVE-2015-10130

The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the circle_thumbnail_slider_with_lightbox_image_management_func() function. This makes it possible for unauthenticated attackers to edit image data which can be used to inject malicious JavaScript, along with deleting images, and uploading malicious files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=1269993%40circle-image-slider-with-lightbox&new=1269993%40circle-image-slider-with-lightbox&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/b6a54470-fc66-43c5-a523-ddbefd47ee1f?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=1269993%40circle-image-slider-with-lightbox&new=1269993%40circle-image-slider-with-lightbox&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/b6a54470-fc66-43c5-a523-ddbefd47ee1f?source=cveThird Party Advisory

Published

Mar 13, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-10125A vulnerability classified as problematic has been found in …8.8
• CVE-2015-10126A vulnerability classified as critical was found in Easy2Map…9.8
• CVE-2015-10127A vulnerability was found in PlusCaptcha Plugin up to 2.0.6 …6.1
• CVE-2015-10128A vulnerability was found in rt-prettyphoto Plugin up to 1.2…6.1
• CVE-2015-10129A vulnerability was found in planet-freo up to 20150116 and …5.9
• CVE-2015-1013OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not …
• CVE-2015-10131A vulnerability was found in chrisy TFO Graphviz Plugin up t…3.5
• CVE-2015-10132A vulnerability classified as problematic was found in Thimo…3.5
• CVE-2015-10133The Subscribe to Comments for WordPress is vulnerable to Loc…7.2
• CVE-2015-10134The Simple Backup plugin for WordPress is vulnerable to Arbi…7.5
• CVE-2015-10135The WPshop 2 – E-Commerce plugin for WordPress is vulnerable…9.8
• CVE-2015-10136The GI-Media Library plugin for WordPress is vulnerable to D…7.5