WordPress Huge IT Slider Plugin 2.7.5 - Multiple Vulnerabilities

There are multiple vulnerabilities in this plugin, such as cross-site request forgery and Persistent JS/HTML Injection. These vulnerabilities allow an attacker to make a user with access privileges to a page and inject JavaScript into the database. Solution Upgrade the plugin...

WordPress Simple Slider Plugin <= 1.0 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in the New Image URL field. Solution Update the plugin...

CVE-2015-1436

Cross-site scripting XSS vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the 1 easingslidermanagecustomizations or 2 easingslidereditsliders page to wp-admin/admin.php...

WordPress Plugin Easing Slider Has Multiple Cross-Site Scripting Vulnerabilities

WordPress is a use of PHP language development of blogging platform , users can support PHP and MySQL database server to set up their own weblog . WordPress Easing Slider Plugin is a wordpress-based plugin . WordPress Easing Slider Plugin has multiple cross-site scripting vulnerabilities that can...

WordPress Easing Slider Plugin <= 2.2.0.6 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "edit" parameter. Solution Upgrade the plugin...

Multiple Slider Plugins for WordPress 'img' Parameter Local File Inclusion Vulnerability

A Slider plugin for WordPress hosted on the remote web server is affected by a local file inclusion vulnerability due to a failure to properly sanitize user-supplied input to the 'img' parameter of the 'imageview.class.php' script. This allows an unauthenticated, remote attacker to read arbitrary...

WordPress Social Slider Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Social Slider is a social sharing button display plugin. Social Slider plugin suffers from a SQL injection vulnerability that allows remo...

Sql injection

SQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the rA array parameter...

CVE-2011-5286

The CVE-2011-5286 entry concerns the WordPress Social Slider plugin. An SQL injection exists in social-slider-2/ajax.php for versions before 7.4.2, exploitable via the rA array parameter, allowing remote attackers to execute arbitrary SQL commands. The vulnerability affects the plugin’s WordPress...

CVE-2014-4846

Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...

CVE-2012-4327

The CVE-2012-4327 entry relates to the WordPress plugin Image News Slider, affected in versions before 3.3. The vulnerability is described as unspecified with remote attack vectors; no explicit root cause or affected components beyond the plugin name/version are provided in the sources. A mitigat...

CVE-2012-4327: Undefined Security Weakness

Unspecified vulnerability in the Image News slider plugin before 3.3 for WordPress has unspecified impact and remote attack vectors...