CVE-2024-34444-Exploit-Poc

CVE-2024-34444 - Сканер отсутствующей авторизации Slider Revolution Профессиональный массовый сканер для CVE-2024-34444, затрагивающего плагин Slider Revolution для WordPress 6.7.0 Banner 🎯 Описание CVE-2024-34444 — это уязвимость отсутствия авторизации в плагине Slider Revolution для WordPress...

WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4. id: CVE-2026-49777 info: name: WordPress Product Slider Pro f...

Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection

The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.This makes ...

WordPress Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload

Slider Future WordPress plugin = 1.0.5 contains an unrestricted file upload vulnerability caused by missing file type validation in 'sliderfuturehandleimageupload', letting unauthenticated attackers upload arbitrary files, exploit requires no authentication. id: CVE-2026-1405 info: name: WordPres...

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...

WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection

WordPress WP TripAdvisor Review Slider plugin before 10.8 is susceptible to authenticated SQL injection. The plugin does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber. This can lead...

OWL Carousel Slider - Cross-Site Scripting

OWL Carousel Slider WordPress plugin v2.2 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craft malicious URL. id: CVE-2024-13627 info:...

CVE-2026-49777

CVE-2026-49777 CVE-2026-49777 - Backdoor RCE dans ShapedPlugin Product Slider Pro pour WooCommerce Analyse technique approfondie : vulnérabilité de backdoor dans Product Slider Pro Base et cause de la vulnérabilité CWE-1284 L'origine technique de la vulnérabilité est classée comme CWE-1284 : «...

CVE-2025-2011

CVE-2025-2011 - Vulnérabilité d'injection SQL du plugin Depicter Référence CVE : CVE-2025-2011 Ce dépôt contient un environnement de preuve de concept pour tester la vulnérabilité d'injection SQL dans le plugin Depicter Slider & Popup Builder versions 3.6.2. Prérequis Docker Docker Compose Python...

CVE-2014-91371-Wordpress-

CVE-2014-91371-Wordpress Description wordpress with Plugin Slider REvolution 4.1.4...

CVE-2025-10353-POC

CVE-2025-10353 POC — Загрузка файла → RCE 🛠️ POC для CVE-2025-10353: уязвимость загрузки файлов в модуле melis-cms-slider платформы Melis, которая может привести к удалённому выполнению кода RCE, когда злоумышленник загружает вредоносный файл через параметр mcsdetailimg по адресу:...

woocommerce-plugin-supply-chain-security-assessment

CVE-2026-49777 - WooCommerce Product Slider Pro: внедрение вредоносного ПО с удалённым выполнением кода RCE Кибербезопасный отчёт в консультационном стиле Профессиональный отчёт об оценке уязвимостей, связанных с риском цепочки поставок плагина WooCommerce, включая влияние на бизнес, устранение...

CVE-2025-2011

CVE-2025-2011 PoC Par : X3RX3S Mais fièrement arraché par Ash Wesker qui a utilisé GPT sur mon code avec sa bannière ; voir ici --- https://github.com/Ashwesker/Blackash-CVE-2025-2011 Vous pouvez même voir mon pseudo dans 'son' code --' Objectif : Un outil de preuve de concept pour tester une...

CVE-2026-94122

Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...

EUVD-2026-89839

Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...

CVE-2026-94122 WordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerability

Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...

CVE-2026-94122 WordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerability

Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...

CVE-2026-94122

The WordPress Responsive Slider Gallery plugin, in versions

CVE-2026-14876

The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-href' parameter in all versions up to, and including, 3.5.1.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

EUVD-2026-89667

The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-href' parameter in all versions up to, and including, 3.5.1.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...