Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| franchidesign | Slider Future | unaffected |
|
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
| Vendors | Products |
|---|---|
|
Franchidesign
Subscribe
|
Slider Future
Subscribe
|
|
Wordpress
Subscribe
|
Wordpress
Subscribe
|
Project Subscriptions
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Thu, 19 Feb 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Franchidesign
Franchidesign slider Future Wordpress Wordpress wordpress |
|
| Vendors & Products |
Franchidesign
Franchidesign slider Future Wordpress Wordpress wordpress |
Thu, 19 Feb 2026 05:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Slider Future plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'slider_future_handle_image_upload' function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. | |
| Title | Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload | |
| Weaknesses | CWE-434 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published:
Updated: 2026-02-19T17:38:32.984Z
Reserved: 2026-01-24T14:56:58.422Z
Link: CVE-2026-1405
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-02-19T07:17:43.883
Modified: 2026-02-19T15:52:39.260
Link: CVE-2026-1405
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-02-19T10:07:19Z