Lucene search
+L

255 matches found

Patchstack
Patchstack
added 2023/05/10 12:0 a.m.15 views

WordPress Team Circle Image Slider With Lightbox Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)

Software Team Circle Image Slider With Lightbox Type Plugin Vulnerable versions = 1.0.17 Fixed in 1.0.18 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2604 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 4f6a23b77029 Credi...

6.1CVSS5.6AI score0.00433EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/05/09 12:0 a.m.16 views

WordPress wordpress vertical image slider plugin Plugin <= 1.2.16 is vulnerable to Cross Site Scripting (XSS)

Software wordpress vertical image slider plugin Type Plugin Vulnerable versions = 1.2.16 Fixed in 1.2.17 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24413 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID da3e59a78609...

7.1CVSS5.7AI score0.00382EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2023/04/25 12:0 a.m.17 views

WordPress Vertical Image Slider < 1.2.17 - Reflected Cross-Site Scripting

The plugin does not properly sanitize the 'searchterm' parameter, leading to Reflected Cross-Site Scripting vulnerability due to insufficient input sanitization and output escaping...

6.1CVSS10AI score0.00433EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/04/19 12:0 a.m.11 views

WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software vSlider Multi Image Slider for WordPress Type Plugin Vulnerable versions = 4.1.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-22672 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ebfb8daaae94...

8.8CVSS7AI score0.00256EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/03/01 12:0 a.m.6 views

WordPress plugin Photo Gallery, Images, Slider in Rbs Image Gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS5.5AI score0.00231EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/02/15 12:0 a.m.18 views

WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Scripting (XSS)

Software vSlider Multi Image Slider for WordPress Type Plugin Vulnerable versions = 4.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25797 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7d1d8d3cc565 Credits...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/08/09 12:0 a.m.7 views

WordPress plugin Slider a SlidersPack – Image Slider, Post Slider, ACF Gallery Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blogging sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS7.9AI score0.00272EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/18 5:15 p.m.23 views

CVE-2022-2223

The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 due to failure to properly check for the existence of a nonce in the function ewicduplicateslider. This make it possible for unauthenticated attackers to duplicate existing posts...

5.4CVSS0.00407EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/07/18 5:15 p.m.3 views

CVE-2022-2223

The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 due to failure to properly check for the existence of a nonce in the function ewicduplicateslider. This make it possible for unauthenticated attackers to duplicate existing posts...

5.4CVSS5.8AI score0.00407EPSS
SaveExploits0References4
OSV
OSV
added 2022/07/18 5:15 p.m.7 views

CVE-2022-2223

The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 due to failure to properly check for the existence of a nonce in the function ewicduplicateslider. This make it possible for unauthenticated attackers to duplicate existing posts...

4.3CVSS5.6AI score0.00407EPSS
SaveExploits0References3
Prion
Prion
added 2022/07/18 5:15 p.m.19 views

Cross site request forgery (csrf)

The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 due to failure to properly check for the existence of a nonce in the function ewicduplicateslider. This make it possible for unauthenticated attackers to duplicate existing posts...

4.3CVSS4.6AI score0.00407EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2022/07/18 4:12 p.m.32 views

CVE-2022-2223 Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication

The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 due to failure to properly check for the existence of a nonce in the function ewicduplicateslider. This make it possible for unauthenticated attackers to duplicate existing posts...

5.4CVSS5.6AI score0.00407EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/07/18 4:12 p.m.7 views

CVE-2022-2223 Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication

The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 due to failure to properly check for the existence of a nonce in the function ewicduplicateslider. This make it possible for unauthenticated attackers to duplicate existing posts...

5.4CVSS5.8AI score0.00407EPSS
SaveExploits0References3
CVE
CVE
added 2022/07/18 4:12 p.m.67 views

CVE-2022-2223

CVE-2022-2223 concerns the WordPress Image Slider plugin, affected versions up to 1.1.121. The root cause is a failure to properly check for the existence of a nonce in the function ewic_duplicate_slider, enabling CSRF. This can allow unauthenticated attackers to cause post/page duplication by tr...

5.4CVSS4.4AI score0.00407EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/07/18 12:0 a.m.5 views

PT-2022-15296 · Unknown · Image Slider

Name of the Vulnerable Software and Affected Versions: Image Slider versions up to, and including 1.1.121 Description: The issue arises from a failure to properly check for the existence of a nonce in the ewic duplicate slider function, making it possible for unauthenticated attackers to duplicat...

5.4CVSS4.6AI score0.00407EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2022/07/18 12:0 a.m.6 views

WordPress plugin Image Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Image Slider 1.1.1...

5.4CVSS5.1AI score0.00407EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2022/07/01 12:0 a.m.22 views

WordPress Image Slider plugin <= 1.1.123 - Cross-Site Request Forgery (CSRF) vulnerability leading to Post Duplication

Cross-Site Request Forgery CSRF vulnerability leading to Post Duplication discovered by Marco Wotschka in WordPress Image Slider plugin versions = 1.1.123. Solution No patched version available...

5.4CVSS3AI score0.00407EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2022/06/30 12:0 a.m.17 views

Image Slider < 1.1.123 - Arbitrary Post Duplication via CSRF

The plugin does not have CSRF check in place when duplicating a post or page, which could allow attackers to make a logged in a admin duplicate them via a CSRF attack...

5.4CVSS5.3AI score0.00407EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/06/24 12:0 a.m.52 views

WordPress plugin Image Slider Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS8.7AI score0.00414EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/06/17 12:0 a.m.41 views

WordPress Image Slider plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Image Slider plugin 1.1.2 and earlier versions contain a cross-site scripting vulnerability...

4.8CVSS2AI score0.00519EPSS
SaveExploits0References1
Rows per page
Query Builder