PT-2022-27479 · Unknown · Ifeature Slider

Name of the Vulnerable Software and Affected Versions: iFeature Slider plugin version 1.2 and earlier Description: A Stored Cross-Site Scripting XSS issue exists, allowing contributors or higher to inject malicious scripts. Recommendations: For iFeature Slider plugin version 1.2 and earlier, upda...

CVE-2022-44741

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

CVE-2022-44741

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

WordPress WP Contact Slider plugin <= 2.4.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress WP Contact Slider plugin versions = 2.4.7. Solution Update the WordPress WP Contact Slider plugin to the latest available version at least 2.4.8...

CVE-2022-2382

The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them. One in particular could allow them to delete arbitrary blog options...

CVE-2022-35882

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in GS Plugins GS Testimonial Slider plugin = 1.9.5 at WordPress...

CVE-2022-35882 WordPress GS Testimonial Slider plugin <= 1.9.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in GS Plugins GS Testimonial Slider plugin = 1.9.5 at WordPress...

CVE-2022-35882

CVE-2022-35882 concerns the GS Testimonial Slider plugin for WordPress, affected up to version 1.9.5. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) issue, exploitable by a user with author or higher privileges. Root cause details across sources indicate insufficient sani...

WordPress Image Slider plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress Image...

Cross site scripting

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Xakuro's XO Slider plugin = 3.3.2 at WordPress...

CVE-2022-32280 WordPress XO Slider plugin <= 3.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Xakuro's XO Slider plugin = 3.3.2 at WordPress...

CVE-2022-29438

Authenticated author or higher user role Persistent Cross-Site Scripting XSS vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress...

CVE-2022-29439

Cross-Site Request Forgery CSRF vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress allows deleting slides...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress allows deleting slides...

Cross site scripting

Authenticated author or higher user role Persistent Cross-Site Scripting XSS vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress...

WordPress plugin Image Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2022-32280

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Xakuro's XO Slider plugin = 3.3.2 at WordPress...

WordPress Video Slider plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A cross-site scripting vulnerability exists in versions of the WordPress Video Slider plugin prior to 1.4.8,...

WordPress Logo Slider plugin SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. The WordPress Logo Slider plugin 1.4.8 and earlier versions are vulnerable to SQL injection, which stems...