CVE-2026-42710— WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability
Quick assessment
Affected
10Web Slider by 10Web
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 10Web Slider（由 10Web slider-wd 插件提供）中，存在对 SQL 命令中特殊元素处理不当的问题（即“SQL 注入”漏洞），导致存在盲注型 SQL 注入风险。该漏洞影响 10Web Slider 插件的以下版本：从早期版本至 1.2.63（含）的所有版本。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-42710
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| 10Web | Slider by 10Web | 0 ~ 1.2.63 | - |
|
II. Public POCs for CVE-2026-42710
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-42710
请登录查看更多情报信息。
Other References for CVE-2026-42710 (1)
IV. Related Vulnerabilities
Same product: Slider by 10Web
-
CVE-2026-66635
WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Requ -
CVE-2024-10566
Slider by 10Web < 1.2.62 - Contributor+ Stored XSS -
CVE-2024-10565
Slider by 10Web < 1.2.62 - Admin+ Stored XSS via Widget -
CVE-2024-8283
Slider by 10Web < 1.2.59 - Admin+ Stored XSS -
CVE-2024-6408
Slider by 10Web < 1.2.57 - Editor+ Stored XSS
Same vendor: 10Web
-
CVE-2026-39787
WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken -
CVE-2026-92974
Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scri -
CVE-2026-96813
Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cros -
CVE-2026-102377
WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Obje -
CVE-2026-94121
WordPress 10Web Booster – Website speed optimization, Cache
Same weakness: CWE-89
-
CVE-2026-42708
WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vul -
CVE-2026-42713
WordPress Post title marquee scroll plugin <= 9.9 - SQL Inje -
CVE-2026-42714
WordPress Pix por Piggly (para Woocommerce) plugin <= 2.1.2 -
CVE-2026-103668
Movable Type站点搜索SQL注入漏洞 -
CVE-2026-42720
WordPress Dynamic User Directory plugin <= 2.4 - SQL Injecti
V. Comments for CVE-2026-42710
No comments yet