Lucene search
+L

317 matches found

CNNVD
CNNVD
added 2022/11/17 12:0 a.m.6 views

WordPress plugin iFeature Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.4CVSS5.5AI score0.00393EPSS
SaveExploits0References2
OSV
OSV
added 2022/11/08 7:15 p.m.5 views

CVE-2022-44741

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

8.8CVSS5.8AI score0.00293EPSS
SaveExploits0References2
Prion
Prion
added 2022/11/08 7:15 p.m.14 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

6.8CVSS8.1AI score0.00293EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/11/07 8:44 p.m.14 views

CVE-2022-44741

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

8.8CVSS7.3AI score0.00293EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2022/10/10 12:0 a.m.52 views

WordPress WP Contact Slider plugin <= 2.4.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress WP Contact Slider plugin versions = 2.4.7. Solution Update the WordPress WP Contact Slider plugin to the latest available version at least 2.4.8...

4.8CVSS2AI score0.00538EPSS
SaveExploits2References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/08/22 3:15 p.m.4 views

CVE-2022-2382

The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them. One in particular could allow them to delete arbitrary blog options...

4.3CVSS6AI score0.00319EPSS
SaveExploits2References2
OSV
OSV
added 2022/07/28 3:15 p.m.8 views

CVE-2022-35882

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in GS Plugins GS Testimonial Slider plugin = 1.9.5 at WordPress...

4.8CVSS5.8AI score0.00563EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/07/28 2:22 p.m.31 views

CVE-2022-35882 WordPress GS Testimonial Slider plugin <= 1.9.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in GS Plugins GS Testimonial Slider plugin = 1.9.5 at WordPress...

4.8CVSS5.1AI score0.00563EPSS
SaveExploits0References2
CVE
CVE
added 2022/07/28 2:22 p.m.85 views

CVE-2022-35882

CVE-2022-35882 concerns the GS Testimonial Slider plugin for WordPress, affected up to version 1.9.5. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) issue, exploitable by a user with author or higher privileges. Root cause details across sources indicate insufficient sani...

4.8CVSS4.9AI score0.00563EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2022/06/17 12:0 a.m.44 views

WordPress Image Slider plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress Image...

5.4CVSS2.4AI score0.00397EPSS
SaveExploits0References1
Prion
Prion
added 2022/06/15 8:15 p.m.16 views

Cross site scripting

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Xakuro's XO Slider plugin = 3.3.2 at WordPress...

3.5CVSS5.2AI score0.00505EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/15 7:54 p.m.22 views

CVE-2022-32280 WordPress XO Slider plugin <= 3.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Xakuro's XO Slider plugin = 3.3.2 at WordPress...

5.4CVSS5.4AI score0.00505EPSS
SaveExploits0References2
NVD
NVD
added 2022/06/15 4:15 p.m.16 views

CVE-2022-29438

Authenticated author or higher user role Persistent Cross-Site Scripting XSS vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress...

4.8CVSS0.0053EPSS
SaveExploits0References2
NVD
NVD
added 2022/06/15 4:15 p.m.19 views

CVE-2022-29439

Cross-Site Request Forgery CSRF vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress allows deleting slides...

5.4CVSS0.00397EPSS
SaveExploits0References2
Prion
Prion
added 2022/06/15 4:15 p.m.18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress allows deleting slides...

4.3CVSS4.8AI score0.00397EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/06/15 4:15 p.m.13 views

Cross site scripting

Authenticated author or higher user role Persistent Cross-Site Scripting XSS vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress...

3.5CVSS4.9AI score0.0053EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/06/15 12:0 a.m.5 views

WordPress plugin Image Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS5.6AI score0.00423EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/06/14 1:31 p.m.8 views

CVE-2022-32280

Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerability in Xakuro's XO Slider plugin = 3.3.2 at WordPress...

5.4CVSS5.6AI score0.00505EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2022/06/13 12:0 a.m.52 views

WordPress Video Slider plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A cross-site scripting vulnerability exists in versions of the WordPress Video Slider plugin prior to 1.4.8,...

4.8CVSS1.1AI score0.00577EPSS
SaveExploits2References1
CNVD
CNVD
added 2022/06/13 12:0 a.m.47 views

WordPress Cube Slider plugin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. The WordPress Cube Slider plugin 1.2 and earlier versions are vulnerable to SQL injection, which...

4CVSS1.4AI score0.0078EPSS
SaveExploits1References1
Rows per page
Query Builder