EIP-2026-113814

PRE-CVE

WordPress Plugin Huge-IT Slider 2.7.5 - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-113814. PoCs published by i0akiN SEC-LABORATORY.

AI-analyzed exploit summary This exploit demonstrates a CSRF and persistent XSS vulnerability in WordPress plugin 'huge-it-slider' version 2.7.5. It injects malicious JavaScript/HTML into vulnerable POST parameters, which are then stored and executed when the slider is rendered.

Description

WordPress Plugin Huge-IT Slider 2.7.5 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC
by i0akiN SEC-LABORATORY · textwebappsphp
https://www.exploit-db.com/exploits/37361

This exploit demonstrates a CSRF and persistent XSS vulnerability in WordPress plugin 'huge-it-slider' version 2.7.5. It injects malicious JavaScript/HTML into vulnerable POST parameters, which are then stored and executed when the slider is rendered.

Classification
Working Poc 95%
Attack Type
Xss
Complexity
Moderate
Reliability
Reliable
Target: WordPress huge-it-slider plugin 2.7.5
Auth required
Prerequisites: Access to a WordPress admin account · Slider ID and variation number extraction
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026