CVE-2025-15491 — Post Slides <= 1.0.1 - Contributor+ Local File Inclusion
The Post Slides WordPress plugin through 1.0.1 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authent…
Published: 2026-02-07 · CVSS: 5.5 · CVSS 3.1
The Post Slides WordPress plugin through 1.0.1 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as with contributor or higher roles to perform LFI attacks
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7