Image Slider Security Vulnerabilities

CVE-2022-0648

The Team Circle Image Slider With Lightbox WordPress plugin before 1.0.16 does not sanitize and escape the order_pos parameter before outputting it back in an admin page, leading to a Reflected Cross-Site...

CVE-2021-24463

The get_sliders() function in the Image Slider by Ays- Responsive Slider and Carousel WordPress plugin before 2.5.0 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin...

CVE-2012-4327

Unspecified vulnerability in the Image News slider plugin before 3.3 for WordPress has unspecified impact and remote attack...