Lucene search
+L

5643 matches found

NVD
NVD
•added 2025/10/22 3:15 p.m.•21 views

CVE-2025-32657

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimonial Slider And Showcase Pro: from n/a...

7.5CVSS0.00614EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/22 2:32 p.m.•22 views

CVE-2025-49956 WordPress Fade Slider plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anandaraj Balu Fade Slider fade-slider allows Reflected XSS.This issue affects Fade Slider: from n/a through = 2.5...

7.1CVSS0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/22 2:32 p.m.•9 views

CVE-2025-49956 WordPress Fade Slider plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anandaraj Balu Fade Slider fade-slider allows Reflected XSS.This issue affects Fade Slider: from n/a through = 2.5...

7.1CVSS5.8AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 2:32 p.m.•26 views

CVE-2025-49956

CVE-2025-49956 concerns WordPress Fade Slider Plugin (

7.1CVSS5.8AI score0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/22 2:32 p.m.•10 views

CVE-2025-32657 WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimonial Slider And Showcase Pro: from n/a...

7.5CVSS8.1AI score0.00614EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/22 2:32 p.m.•30 views

CVE-2025-32657 WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimonial Slider And Showcase Pro: from n/a...

7.5CVSS0.00614EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 2:32 p.m.•77 views

CVE-2025-32657

CVE-2025-32657 describes a Local File Inclusion vulnerability in the WordPress plugin “RadiusTheme Testimonial Slider And Showcase Pro” (versions

7.5CVSS8.1AI score0.00614EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•30 views

PT-2025-43217

Name of the Vulnerable Software and Affected Versions Anandaraj Balu Fade Slider versions through 2.5 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Reflected Cross-Site Scripting XSS condition. This allows a...

7.1CVSS5.7AI score0.0025EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•2 views

CVE-2025-49956: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anandaraj Balu Fade Slider fade-slider allows Reflected XSS.This issue affects Fade Slider: from n/a through = 2.5...

7.1CVSS5.8AI score0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•21 views

WordPress plugin Testimonial Slider And Showcase Pro 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security vulnerability exists in the WordPress plugi...

7.5CVSS8.2AI score0.00614EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•24 views

PT-2025-43151

Name of the Vulnerable Software and Affected Versions RadiusTheme Testimonial Slider And Showcase Pro versions through 2.1.7 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows...

7.5CVSS6.5AI score0.00614EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•24 views

WordPress Plugin Fade Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

7.1CVSS6AI score0.0025EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•8 views

CVE-2025-32657: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimonial Slider And Showcase Pro: from n/a...

7.5CVSS8.1AI score0.00614EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/19 6:43 a.m.•29 views

CVE-2025-10006

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'revslidervc' shortcode in all versions up to, and including, 8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS6.1AI score0.00233EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/18 9:30 a.m.•22 views

EUVD-2025-34979

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'revslidervc' shortcode in all versions up to, and including, 8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS6.1AI score0.00233EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/18 7:15 a.m.•21 views

CVE-2025-10006

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'revslidervc' shortcode in all versions up to, and including, 8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00233EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/18 6:42 a.m.•47 views

CVE-2025-10006

CVE-2025-10006 affects WPBakery Page Builder for WordPress (

6.4CVSS6.1AI score0.00233EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/18 12:00 a.m.•6 views

PT-2025-42692

Name of the Vulnerable Software and Affected Versions WPBakery Page Builder plugin for WordPress versions prior to 8.6 Description The software is susceptible to Stored Cross-Site Scripting through the 'rev slider vc' shortcode due to inadequate input sanitization and output escaping of...

6.4CVSS5.9AI score0.00233EPSS
SaveExploits0References7
Wordfence Blog
Wordfence Blog
•added 2025/10/14 3:56 p.m.•14 views

4,000,000 WordPress Sites Affected by Arbitrary File Read Vulnerability in Slider Revolution WordPress Plugin

Calling all Vulnerability Researchers and Bug Bounty Hunters! Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,200 pe...

6.5CVSS6.7AI score0.00526EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/10/10 12:25 p.m.•24 views

CVE-2025-10249

The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on several functions in all versions up to, and including, 6.7.37. This makes it possible for authenticated attackers, with Contributor-level access and above...

6.5CVSS5.2AI score0.0038EPSS
SaveExploits0References1
Rows per page
Query Builder