Default credentials

The Slider WordPress plugin before 3.5.12 does not ensure that posts to be accessed via an AJAX action are slides and can be viewed by the user making the request, allowing any authenticated users, such as subscriber to access the content arbitrary post such as private, draft and password protect...

SEO Slider < 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Description The SEO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slider' shortcode and post meta in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

CVE-2023-47785

Cross-Site Request Forgery CSRF vulnerability in LayerSlider plugin = 7.7.9 versions...

CVE-2023-47755

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AazzTech WooCommerce Product Carousel Slider plugin = 3.3.5 versions...

CVE-2023-5466

The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2023-5466

The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)

Software Layer Slider Type Plugin Vulnerable versions = 1.1.9.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47228 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 580060faeda2 Credits yuyudhn Required privilege...

CVE-2023-45754

CVE-2023-45754 : A stored Cross-Site Scripting (XSS) flaw in the WordPress plugin “Easy Testimonial Slider and Form” (versions ≤ 1.0.18). The root cause is improper input neutralization during web page generation, enabling an attacker (with administrator privileges per PatchStack/Wordfence contex...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Tiny Carousel Horizontal Slider plugin = 8.1 versions...

CVE-2023-5334

The CVE-2023-5334 in WP Responsive header image slider (WordPress) is a Stored XSS in the sp_responsiveslider shortcode affecting versions up to 3.2.1. Authenticated attackers with contributor+ can inject scripts that execute on page load. Multiple sources confirm the vulnerability; patch status ...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

CVE-2023-23798 WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

CVE-2023-24413

The CVE CVE-2023-24413 describes an unauthenticated Reflected Cross-Site Scripting (XSS) in the WordPress plugin I Thirteen Web Solution WordPress vertical image slider (WP vertical image slider) versions

CVE-2023-35043

CVE-2023-35043 corresponds to an unauthenticated stored XSS in the WordPress plugin Neha Goel Recent Posts Slider , affected versions

WordPress WordPress Slider Plugin – Block Slider Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Slider Plugin – Block Slider Type Plugin Vulnerable versions = 2.1.6 Fixed in 2.1.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a643ba97e0d5 Credits Rafie...

CVE-2023-23671

CVE-2023-23671 is a CSRF vulnerability in the Muneeb Layer Slider plugin for WordPress, affecting versions

WordPress Plugin Layer Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)

Software Layer Slider Type Plugin Vulnerable versions = 1.1.9.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23798 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID abdcf416630e Credits Rafshanzani Suhada Require...

CVE-2023-23890

CVE-2023-23890 affects the WordPress plugin WP Airbnb Review Slider (LJ Apps) versioned up to 3.2. The vulnerability is a Cross-Site Request Forgery (CSRF) that can lead to reviews being removed; Patch details indicate the issue is exploitable by an unauthenticated attacker and is fixed in versio...