Lucene search
+L

35 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-3017: Deserialization of Untrusted Data

The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.12 via deserialization of untrusted input in the importshortcodes function. This makes it possible for authenticate...

7.2CVSS6AI score0.00694EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 8:48 a.m.•14 views

CVE-2025-23977

Cross-Site Request Forgery CSRF vulnerability in Bhaskar Dhote Post Carousel Slider post-carousel-slider allows Stored XSS.This issue affects Post Carousel Slider: from n/a through = 2.0.1...

7.1CVSS7.2AI score0.00134EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-27936

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.00285EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-3578

Malicious code in bioql PyPI...

7.1CVSS9.1AI score0.00134EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•9 views

EUVD-2025-30710

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00452EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/09/24 6:30 p.m.•13 views

CVE-2025-57955

Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Carousel Slider for Elementor: from n/a through = 1.7.0...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:15 p.m.•12 views

CVE-2025-57955

Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Carousel Slider for Elementor: from n/a through = 1.7.0...

6.5CVSS0.00452EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/22 7:08 p.m.•12 views

WordPress Post Carousel Slider for Elementor Plugin <= 1.7.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Abu Hurayra in WordPress Plugin Post Carousel Slider for Elementor versions = 1.7.0...

6.5CVSS6.7AI score0.00452EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2025/09/22 6:24 p.m.•22 views

CVE-2025-57955 WordPress Post Carousel Slider for Elementor Plugin <= 1.7.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Carousel Slider for Elementor: from n/a through = 1.7.0...

6.5CVSS0.00452EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/22 6:24 p.m.•5 views

CVE-2025-57955 WordPress Post Carousel Slider for Elementor Plugin <= 1.7.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Carousel Slider for Elementor: from n/a through = 1.7.0...

6.5CVSS5.2AI score0.00452EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/22 6:24 p.m.•22 views

CVE-2025-57955

CVE-2025-57955 describes a Missing Authorization vulnerability in the WordPress plugin Post Carousel Slider for Elementor . Affected version range is listed as “from n/a through 1.7.0” and the CVE entry indicates the vulnerability status is Unpatched . The accompanying CVSS vector (AV:N/AC:L/PR:L...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•14 views

WordPress plugin Post Carousel Slider for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

6.5CVSS6.5AI score0.00452EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•11 views

PT-2025-38805

Name of the Vulnerable Software and Affected Versions Post Carousel Slider for Elementor versions through 1.7.0 Description An authorization issue exists in Post Carousel Slider for Elementor, allowing exploitation due to incorrectly configured access control security levels. Recommendations Upda...

6.5CVSS6.6AI score0.00452EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•3 views

CVE-2025-57955: Missing Authorization

Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Carousel Slider for Elementor: from n/a through = 1.7.0...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/26 2:15 a.m.•14 views

CVE-2025-3863

The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing capability check on the processwbelpspromoform function in all versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with Subscriber-level acces...

4.3CVSS5.9AI score0.00285EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/06/26 2:06 a.m.•26 views

CVE-2025-3863 Post Carousel Slider for Elementor <= 1.6.0 - Authenticated (Subscriber+) Missing Authorization via process_wbelps_promo_form Function

The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing capability check on the processwbelpspromoform function in all versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with Subscriber-level acces...

4.3CVSS0.00285EPSS
SaveExploits0References4
CVE
CVE
•added 2025/06/26 2:06 a.m.•45 views

CVE-2025-3863

CVE-2025-3863 affects the WordPress plugin Post Carousel Slider for Elementor . The vulnerability is due to a missing capability check in the function process_wbelps_promo_form() across versions up to 1.6.0. This enables authenticated attackers with Subscriber-level access and above to trigger th...

4.3CVSS6.3AI score0.00285EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2025/06/26 12:00 a.m.•13 views

WordPress plugin Post Carousel Slider for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.4AI score0.00285EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/26 12:00 a.m.•1 views

CVE-2025-3863: Missing Authorization

The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing capability check on the processwbelpspromoform function in all versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with Subscriber-level acces...

4.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:13 a.m.•19 views

CVE-2024-53749

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Stored XSS.This issue affects Post Carousel Slider for Elementor: from n/a through = 1.5.0...

6.5CVSS7.2AI score0.00239EPSS
SaveExploits0References1
Rows per page
Query Builder