Lucene search
+L

4663 matches found

RedhatCVE
RedhatCVE
added 2025/04/25 4:41 p.m.13 views

CVE-2025-27286

Deserialization of Untrusted Data vulnerability in saoshyant1994 Saoshyant Slider saoshyant-slider allows Object Injection.This issue affects Saoshyant Slider: from n/a through = 3.0...

9.8CVSS7.2AI score0.0059EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/22 12:00 a.m.14 views

PT-2025-17530 · Averta +1 · Master Slider

Name of the Vulnerable Software and Affected Versions: Averta Master Slider versions 3.10.8 and earlier Master Slider Plugin versions 3.10.7 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the Master Slider Plugin on WordPress,...

4.3CVSS5.3AI score0.00232EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/04/21 6:38 p.m.11 views

WordPress Social Slider Feed plugin < 2.2.9 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Social Slider Feed versions 2.2.9...

3.5CVSS6AI score0.00257EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2025/04/19 4:15 a.m.22 views

CVE-2025-3275

The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider widget in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00289EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/17 4:15 p.m.11 views

CVE-2025-32527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pey22 T&P Gallery Slider tp-gallery-slider allows Stored XSS.This issue affects T&P Gallery Slider: from n/a through = 1.2...

7.1CVSS0.00276EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.11 views

CVE-2025-27286

Deserialization of Untrusted Data vulnerability in saoshyant1994 Saoshyant Slider saoshyant-slider allows Object Injection.This issue affects Saoshyant Slider: from n/a through = 3.0...

9.8CVSS0.0059EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/17 3:48 p.m.61 views

CVE-2025-27286

CVE-2025-27286 is a WordPress plugin vulnerability in Saoshyant Slider (versions

9.8CVSS7.2AI score0.0059EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/17 3:48 p.m.29 views

CVE-2025-27286 WordPress Saoshyant Slider Plugin <= 3.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in saoshyant1994 Saoshyant Slider saoshyant-slider allows Object Injection.This issue affects Saoshyant Slider: from n/a through = 3.0...

9.8CVSS0.0059EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:48 p.m.9 views

CVE-2025-27286 WordPress Saoshyant Slider Plugin <= 3.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in saoshyant1994 Saoshyant Slider saoshyant-slider allows Object Injection.This issue affects Saoshyant Slider: from n/a through = 3.0...

9.8CVSS8.6AI score0.0059EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/17 3:47 p.m.23 views

CVE-2025-32527 WordPress T&P Gallery Slider plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pey22 T&P Gallery Slider tp-gallery-slider allows Stored XSS.This issue affects T&P Gallery Slider: from n/a through = 1.2...

7.1CVSS0.00276EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/17 3:47 p.m.49 views

CVE-2025-32527

CVE-2025-32527 is a stored XSS vulnerability in the WordPress plugin T&P Gallery Slider (versions up to 1.2). The root cause is improper neutralization of input during web page generation, enabling stored cross-site scripting. The CVSS v3.1 base score is 7.1 (HIGH), with attack vector: NETWORK, c...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:47 p.m.8 views

CVE-2025-32527 WordPress T&P Gallery Slider plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pey22 T&P Gallery Slider tp-gallery-slider allows Stored XSS.This issue affects T&P Gallery Slider: from n/a through = 1.2...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:00 a.m.10 views

WordPress plugin Saoshyant Slider 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

9.8CVSS8.8AI score0.0059EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:00 a.m.10 views

PT-2025-17053 · Unknown · Saoshyant Slider

Name of the Vulnerable Software and Affected Versions: Saoshyant Slider versions n/a through 3.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 3.0, update to a version that fixes the Deserialization...

9.8CVSS9.1AI score0.0059EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/04/17 12:00 a.m.8 views

PT-2025-17099 · Unknown · T&P Gallery Slider

Name of the Vulnerable Software and Affected Versions: T&P Gallery Slider versions n/a through 1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS in the T&P Gallery Slider...

7.1CVSS7AI score0.00276EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/17 12:00 a.m.6 views

WordPress plugin T&P Gallery Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.1AI score0.00276EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/16 2:07 p.m.9 views

WordPress Logo Carousel Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Logo Carousel Slider versions = 2.1.3...

6.5CVSS7.2AI score0.0034EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/04/16 1:15 p.m.8 views

CVE-2025-39525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Logo Carousel Slider logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel Slider: from n/a through = 2.1.3...

6.5CVSS0.0034EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/16 12:45 p.m.6 views

CVE-2025-39525 WordPress Logo Carousel Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Logo Carousel Slider logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel Slider: from n/a through = 2.1.3...

6.5CVSS8.6AI score0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/16 12:45 p.m.23 views

CVE-2025-39525 WordPress Logo Carousel Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Logo Carousel Slider logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel Slider: from n/a through = 2.1.3...

6.5CVSS0.0034EPSS
SaveExploits0References1
Rows per page
Query Builder