Lucene search
+L

5642 matches found

Cvelist
Cvelist
•added 2025/12/24 1:10 p.m.•45 views

CVE-2025-68581 WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH Slider for page builders: from n/a through = 1.0.11...

5.4CVSS0.00199EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/24 1:10 p.m.•8 views

CVE-2025-68581 WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH Slider for page builders: from n/a through = 1.0.11...

5.4CVSS6AI score0.00199EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/24 1:10 p.m.•29 views

CVE-2025-68581

Technical details about CVE-2025-68581 (affected product, version, impact, and fix) are not publicly provided in the supplied documents; monitor for updates.

5.4CVSS6AI score0.00199EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/24 12:31 p.m.•32 views

CVE-2025-68500

The CVE-2025-68500 entry describes a Server-Side Request Forgery (SSRF) in the WordPress plugin Prime Slider – Addons For Elementor (bdthemes-prime-slider-lite). Affected component: bdthemes Prime Slider – Addons For Elementor, via the lite variant; vulnerable version range: up to and including 4...

4.9CVSS5.9AI score0.00167EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/24 12:31 p.m.•7 views

CVE-2025-68500 WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

4.9CVSS5.9AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/24 12:31 p.m.•47 views

CVE-2025-68500 WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

4.9CVSS0.00167EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•14 views

PT-2025-53269

Name of the Vulnerable Software and Affected Versions YITH Slider for page builders versions through 1.0.11 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. Recommendations Update YITH Slider for page builders to a versi...

8.1CVSS6.5AI score0.00199EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•19 views

PT-2025-53078

Name of the Vulnerable Software and Affected Versions bdthemes Prime Slider – Addons For Elementor versions through 4.0.10 Description A Server-Side Request Forgery SSRF issue exists in bdthemes Prime Slider – Addons For Elementor. This allows for Server Side Request Forgery. The issue is present...

9.1CVSS6.6AI score0.00167EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•14 views

WordPress plugin YITH Slider for page builders 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS6.5AI score0.00199EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•21 views

WordPress plugin Prime Slider – Addons For Elementor 安全漏洞

WordPress Prime Slider - Addons For Elementor plugin is a free plugin for Elementor page builder designed to help users easily create various interactive responsive sliders. The WordPress Prime Slider - Addons For Elementor plugin suffers from a server-side request forgery vulnerability, which...

4.9CVSS6.8AI score0.00167EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•7 views

CVE-2025-68581: Missing Authorization

Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH Slider for page builders: from n/a through = 1.0.11...

5.4CVSS5.9AI score0.00199EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•5 views

CVE-2025-68500: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

4.9CVSS5.8AI score0.00167EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/21 4:12 a.m.•26 views

CVE-2025-14721

The Responsive and Swipe slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rsSlider shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.5CVSS5AI score0.00199EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/20 4:16 a.m.•16 views

CVE-2025-14721

The Responsive and Swipe slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rsSlider shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.5CVSS0.00199EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/20 3:20 a.m.•47 views

CVE-2025-14721 Responsive and Swipe slider <= 1.0.2 - Authenticated (Editor+) Stored Cross-Site Scripting via Shortcode

The Responsive and Swipe slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rsSlider shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.5CVSS0.00199EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/20 3:20 a.m.•45 views

CVE-2025-14721

CVE-2025-14721 affects the WordPress plugin Responsive and Swipe Slider . It exposes a Stored Cross-Site Scripting (XSS) vulnerability via the plugin’s rsSlider shortcode in all versions up to and including 1.0.2, due to insufficient input sanitization and output escaping on user-supplied attribu...

5.5CVSS6.1AI score0.00199EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/20 12:00 a.m.•14 views

WordPress plugin Responsive and Swipe slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.5CVSS5.8AI score0.00199EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/20 12:00 a.m.•4 views

CVE-2025-14721: Improper Neutralization of Input During Web Page Generation

The Responsive and Swipe slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rsSlider shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.5CVSS6AI score0.00199EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/20 12:00 a.m.•16 views

PT-2025-52543

Name of the Vulnerable Software and Affected Versions Responsive and Swipe slider plugin for WordPress versions prior to 1.0.3 Description The plugin is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping of user-supplied attributes within the...

5.5CVSS5.3AI score0.00199EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2025/12/19 10:03 p.m.•23 views

WordPress Responsive and Swipe slider plugin <= 1.0.2 - Authenticated (Editor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Editor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Bhumividh Treloges in WordPress Plugin RESPONSIVE AND SWIPE SLIDER! versions = 1.0.2...

5.5CVSS5.5AI score0.00199EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder