What is GHSA-6j5g-h4rw-c3j4?

GHSA-6j5g-h4rw-c3j4 is a security advisory published by GitHub Security Advisories with Medium severity. WordPress Lazy Content Slider Plugin 3.4 contains a cross-site request forgery vulnerability that...

Which CVE IDs does GHSA-6j5g-h4rw-c3j4 cover?

GHSA-6j5g-h4rw-c3j4 covers the following CVE IDs: CVE-2016-20074. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6j5g-h4rw-c3j4?

GHSA-6j5g-h4rw-c3j4 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-6j5g-h4rw-c3j4MediumCVSS 4.3

WordPress Lazy Content Slider Plugin 3.4 contains a cross-site request forgery vulnerability that...

Vendor

GitHub Security Advisories

Published

June 15, 2026

Last Modified

June 15, 2026

🔗 CVE IDs covered (1)

CVE-2016-20074 →

📋 Description

WordPress Lazy Content Slider Plugin 3.4 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by crafting malicious HTML forms. Attackers can trick authenticated administrators into submitting POST requests to the plugin settings page via lzcs_admin.php to modify plugin configuration parameters like lzcs_color and lzcs_count.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2016-20074
https://www.exploit-db.com/exploits/40070
https://www.vulncheck.com/advisories/wordpress-lazy-content-slider-plugin-csrf
https://github.com/advisories/GHSA-6j5g-h4rw-c3j4