Lucene search
K

27 matches found

RedhatCVE
RedhatCVE
added 3 days ago5 views

CVE-2026-5694

The Quick Interest Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'loan-amount' and 'loan-period' parameters in all versions up to, and including, 3.1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacke...

7.2CVSS5.7AI score0.00117EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/22 9:31 p.m.2 views

EUVD-2026-22845

The Quick Interest Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'loan-amount' and 'loan-period' parameters in all versions up to, and including, 3.1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacke...

7.2CVSS5.9AI score0.00117EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/04/15 1:23 p.m.2 views

WordPress Quick Interest Slider plugin <= 3.1.5 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Chawabhon Netisingha JNX03 in WordPress Plugin Quick Interest Slider versions = 3.1.5...

7.2CVSS5.8AI score0.00117EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/15 12:0 a.m.3 views

PT-2026-33012

Name of the Vulnerable Software and Affected Versions Quick Interest Slider versions prior to 3.1.6 Description The Quick Interest Slider plugin for WordPress contains a Stored Cross-Site Scripting issue caused by insufficient input sanitization and output escaping. Unauthenticated attackers can...

7.2CVSS5.3AI score0.00117EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/04/15 12:0 a.m.5 views

WordPress plugin Quick Interest Slider 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.2CVSS5.8AI score0.00117EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/17 10:3 a.m.1 views

CVE-2025-64237

Cross-Site Request Forgery CSRF vulnerability in Graham Quick Interest Slider quick-interest-slider allows Cross Site Request Forgery.This issue affects Quick Interest Slider: from n/a through = 3.1.5...

4.3CVSS6.9AI score0.00015EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.27 views

CVE-2025-64237 WordPress Quick Interest Slider plugin <= 3.1.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Graham Quick Interest Slider quick-interest-slider allows Cross Site Request Forgery.This issue affects Quick Interest Slider: from n/a through = 3.1.5...

4.3CVSS0.00015EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.2 views

CVE-2025-64237 WordPress Quick Interest Slider plugin <= 3.1.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Graham Quick Interest Slider quick-interest-slider allows Cross Site Request Forgery.This issue affects Quick Interest Slider: from n/a through = 3.1.5...

4.3CVSS6.5AI score0.00015EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.2 views

WordPress plugin Quick Interest Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00015EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.1 views

PT-2025-51385

Name of the Vulnerable Software and Affected Versions Graham Quick Interest Slider versions through 3.1.5 Description A Cross-Site Request Forgery CSRF issue exists in Graham Quick Interest Slider. This allows attackers to perform actions on behalf of unsuspecting users. Recommendations Update...

4.3CVSS6.6AI score0.00015EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/12/10 3:13 p.m.2 views

CVE-2025-62153

Missing Authorization vulnerability in Graham Quick Interest Slider quick-interest-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Interest Slider: from n/a through = 3.1.7...

5.3CVSS5.7AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.3 views

EUVD-2025-202028

Missing Authorization vulnerability in Graham Quick Interest Slider quick-interest-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Interest Slider: from n/a through = 3.1.5...

6.5AI score0.00038EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.1 views

CVE-2025-62153

Missing Authorization vulnerability in Graham Quick Interest Slider quick-interest-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Interest Slider: from n/a through = 3.1.7...

5.3CVSS0.00038EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/09 2:52 p.m.19 views

CVE-2025-62153 WordPress Quick Interest Slider plugin <= 3.1.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Graham Quick Interest Slider quick-interest-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Interest Slider: from n/a through = 3.1.7...

5.3CVSS0.00038EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 2:52 p.m.5 views

CVE-2025-62153

CVE-2025-62153 concerns WordPress plugin “Quick Interest Slider” (versions up to 3.1.7) with a Missing Authorization / Broken Access Control flaw. Public descriptions from NVD/Red Hat/ENISA (and CVE enrichment) indicate an improper access-control configuration that could allow an attacker to expl...

5.3CVSS5.7AI score0.00038EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:52 p.m.2 views

CVE-2025-62153 WordPress Quick Interest Slider plugin <= 3.1.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Graham Quick Interest Slider quick-interest-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Interest Slider: from n/a through = 3.1.7...

5.3CVSS5.1AI score0.00038EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/11/29 5:39 p.m.4 views

WordPress Quick Interest Slider plugin <= 3.1.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Quick Interest Slider versions = 3.1.5...

4.3CVSS7AI score0.00015EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/11/29 5:34 p.m.3 views

WordPress Quick Interest Slider plugin <= 3.1.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Quick Interest Slider versions = 3.1.5...

8.8CVSS7AI score0.00038EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-8423

Malicious code in bioql PyPI...

6.5CVSS9AI score0.00291EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/03/29 2:28 p.m.3 views

CVE-2025-26738

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Graham Quick Interest Slider quick-interest-slider allows DOM-Based XSS.This issue affects Quick Interest Slider: from n/a through = 3.1.5...

6.5CVSS7.2AI score0.00291EPSS
Exploits0References1
Rows per page
Query Builder