Lucene search
+L

4665 matches found

Vulnrichment
Vulnrichment
added 2025/04/16 12:45 p.m.6 views

CVE-2025-39525 WordPress Logo Carousel Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Logo Carousel Slider logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel Slider: from n/a through = 2.1.3...

6.5CVSS8.6AI score0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/16 12:45 p.m.23 views

CVE-2025-39525 WordPress Logo Carousel Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Logo Carousel Slider logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel Slider: from n/a through = 2.1.3...

6.5CVSS0.0034EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.6 views

WordPress plugin Logo Carousel Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS6.6AI score0.0034EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/14 5:47 p.m.8 views

WordPress T&P Gallery Slider plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin T&P Gallery Slider versions = 1.2...

7.1CVSS6.6AI score0.00276EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/13 9:36 a.m.27 views

CVE-2025-32656

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimonial Slider And Showcase Pro: from n/a...

8.1CVSS7.2AI score0.00889EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/11 5:08 p.m.23 views

CVE-2025-31392

Cross-Site Request Forgery CSRF vulnerability in Shameem Reza Smart Product Gallery Slider smart-product-gallery-slider allows Cross Site Request Forgery.This issue affects Smart Product Gallery Slider: from n/a through = 1.0.4...

7.1CVSS7.2AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/11 9:15 a.m.27 views

CVE-2025-32656

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimonial Slider And Showcase Pro: from n/a...

8.1CVSS0.00889EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/11 8:43 a.m.33 views

CVE-2025-32656 WordPress Testimonial Slider and Showcase Pro plugin <= 2.3.15 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimonial Slider And Showcase Pro: from n/a...

8.1CVSS0.00889EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/11 8:43 a.m.8 views

CVE-2025-32656 WordPress Testimonial Slider and Showcase Pro plugin <= 2.3.15 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimonial Slider And Showcase Pro: from n/a...

8.1CVSS7.2AI score0.00889EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/11 12:00 a.m.14 views

PT-2025-16094 · Unknown · Notfound Testimonial Slider/Showcase Pro

Name of the Vulnerable Software and Affected Versions: NotFound Testimonial Slider And Showcase Pro versions 2.3.15 and earlier Description: The issue is related to improper control of filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows P...

8.1CVSS8.7AI score0.00889EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/04/11 12:00 a.m.10 views

WordPress plugin Testimonial Slider And Showcase Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

8.1CVSS8.3AI score0.00889EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/09 5:15 p.m.14 views

CVE-2025-31392

Cross-Site Request Forgery CSRF vulnerability in Shameem Reza Smart Product Gallery Slider smart-product-gallery-slider allows Cross Site Request Forgery.This issue affects Smart Product Gallery Slider: from n/a through = 1.0.4...

7.1CVSS0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/09 4:10 p.m.29 views

CVE-2025-31392 WordPress Smart Product Gallery Slider plugin <= 1.0.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Shameem Reza Smart Product Gallery Slider smart-product-gallery-slider allows Cross Site Request Forgery.This issue affects Smart Product Gallery Slider: from n/a through = 1.0.4...

7.1CVSS0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/09 12:00 a.m.11 views

WordPress plugin Smart Product Gallery Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS7.1AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/08 7:01 a.m.59 views

CVE-2019-25223

CVE-2019-25223 affects the WordPress plugin “Team Circle Image Slider With Lightbox.” The Wordfence vulnerability entry confirms an SQL Injection via the parameter id in all versions up to 1.0.4, caused by insufficient escaping and lack of proper prepared statements. Impact per the CVSS metrics i...

4.9CVSS7.5AI score0.0039EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/04/08 7:01 a.m.24 views

CVE-2019-25223 Team Circle Image Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection

The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

4.9CVSS0.0039EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/04/08 7:01 a.m.4 views

CVE-2019-25223 Team Circle Image Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection

The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

4.9CVSS7.5AI score0.0039EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/08 12:00 a.m.7 views

WordPress plugin Team Circle Image Slider With Lightbox SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

4.9CVSS6.9AI score0.0039EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/04/06 4:33 p.m.11 views

CVE-2025-32152

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Essential Plugin Slider a SlidersPack sliderspack-all-in-one-image-sliders allows PHP Local File Inclusion.This issue affects Slider a SlidersPack: from n/a through = 2.3...

7.5CVSS7.2AI score0.01055EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/05 2:28 p.m.12 views

CVE-2025-30889

Deserialization of Untrusted Data vulnerability in PickPlugins Testimonial Slider testimonial allows Object Injection.This issue affects Testimonial Slider: from n/a through = 2.0.13...

8.8CVSS7.2AI score0.00461EPSS
SaveExploits0References1
Rows per page
Query Builder