Lucene search
K

8 matches found

Cvelist
Cvelist
added 2025/12/31 4:58 p.m.23 views

CVE-2025-66157 WordPress Sliper for Elementor plugin <= 1.0.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Sliper for Elementor sliper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sliper for Elementor: from n/a through = 1.0.10...

5.4CVSS0.00221EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.2 views

WordPress plugin Slider for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

5.4CVSS6.5AI score0.00221EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-19335

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00192EPSS
Exploits0References1
OSV
OSV
added 2023/03/27 4:15 p.m.7 views

CVE-2023-0495

The HT Slider For Elementor WordPress plugin before 1.4.0 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

4.3CVSS6.6AI score0.00262EPSS
Exploits2References1
NVD
NVD
added 2023/03/27 4:15 p.m.25 views

CVE-2023-0495

The HT Slider For Elementor WordPress plugin before 1.4.0 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

4.3CVSS4.7AI score0.00262EPSS
Exploits2References1
Prion
Prion
added 2023/03/27 4:15 p.m.20 views

Cross site request forgery (csrf)

The HT Slider For Elementor WordPress plugin before 1.4.0 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

4.3CVSS4.7AI score0.00262EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2023/03/27 3:37 p.m.26 views

CVE-2023-0495 HT Slider For Elementor < 1.4.0 - Arbitrary Plugin Activation via CSRF

The HT Slider For Elementor WordPress plugin before 1.4.0 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

5AI score0.00262EPSS
Exploits2References1
Patchstack
Patchstack
added 2023/03/06 12:0 a.m.20 views

WordPress HT Slider For Elementor Plugin < 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software HT Slider For Elementor Type Plugin Vulnerable versions 1.4.0 Fixed in 1.4.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-0495 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID fea57db2be31 Credits Lana Codes...

4.3CVSS6.6AI score0.00262EPSS
Exploits2References4Affected Software1
Rows per page
Query Builder