CVE-2022-2223

The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 due to failure to properly check for the existence of a nonce in the function ewic_duplicate_slider. This make it possible for unauthenticated attackers to duplicate existing posts or pages granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352
• CWE-352
• CWE-352

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2749352%40image-slider-widget&new=2749352%40image-slider-widget&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/6356e226-a449-4cd0-be60-2a1c9c70aa59?source=cveThird Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2223Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2749352%40image-slider-widget&new=2749352%40image-slider-widget&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/6356e226-a449-4cd0-be60-2a1c9c70aa59?source=cveThird Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2223Third Party Advisory

Published

Jul 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22224An Improper Check or Handling of Exceptional Conditions vuln…6.5
• CVE-2022-22225A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerab…5.9
• CVE-2022-22226In VxLAN scenarios on EX4300-MP, EX4600, QFX5000 Series devi…6.5
• CVE-2022-22227An Improper Check for Unusual or Exceptional Conditions vuln…5.3
• CVE-2022-22228An Improper Validation of Specified Type of Input vulnerabil…7.5
• CVE-2022-22229An Improper Neutralization of Input During Web Page Generati…8.4
• CVE-2022-22230An Improper Input Validation vulnerability in the Routing Pr…6.5
• CVE-2022-22231An Unchecked Return Value to NULL Pointer Dereference vulner…7.5
• CVE-2022-22232A NULL Pointer Dereference vulnerability in the Packet Forwa…7.5
• CVE-2022-22233An Unchecked Return Value to NULL Pointer Dereference vulner…5.5
• CVE-2022-22234An Improper Preservation of Consistency Between Independent …5.5
• CVE-2022-22235An Improper Check for Unusual or Exceptional Conditions vuln…7.5