5665 matches found
CVE-2024-10896
The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo and Slider settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting...
CVE-2024-51834
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in luzuk Themes Luzuk Slider luzuk-slider allows Stored XSS.This issue affects Luzuk Slider: from n/a through = 0.1.5...
CVE-2024-51887
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ryscript NV Slider nv-slider allows Stored XSS.This issue affects NV Slider: from n/a through = 1.6...
CVE-2024-51896
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Magic Slider magic-slider allows Stored XSS.This issue affects Magic Slider: from n/a through = 1.3...
CVE-2024-51925
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sazzad Testimonial Slider Shortcode testimonial-slider-shortcode allows Stored XSS.This issue affects Testimonial Slider Shortcode: from n/a through = 1.1.9...
CVE-2024-37449
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a through 6.7.13...
CVE-2024-38750
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in digontoahsan Advanced post slider.This issue affects Advanced post slider: from n/a through 3.0.0...
CVE-2024-11108
The Serious Slider WordPress plugin before 1.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-3288
The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-47359
Cross-Site Request Forgery CSRF vulnerability in averta Depicter Slider depicter.This issue affects Depicter Slider: from n/a through = 3.2.2...
CVE-2023-28622
Auth. author+ Stored Cross-Site Scripting XSS vulnerability in Trident Technolabs Easy Slider Revolution plugin = 1.0.0 versions...
CVE-2023-0492
The GS Products Slider for WooCommerce WordPress plugin before 1.5.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...
CVE-2023-0261
The WP TripAdvisor Review Slider WordPress plugin before 10.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber...
CVE-2023-41865
Missing Authorization vulnerability in bqworks Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Pro: from n/a through 4.8.6...
CVE-2023-30485
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Solwin Infotech Responsive WordPress Slider – Avartan Slider Lite plugin = 1.5.3 versions...
CVE-2023-47784
Unrestricted Upload of File with Dangerous Type vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a through 6.6.15...
CVE-2023-47228
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...
CVE-2023-47507
Deserialization of Untrusted Data vulnerability in Master Slider Master Slider Pro.This issue affects Master Slider Pro: from n/a through 3.6.5...