PT-2026-64960

Administrator SQL Injection in WP Google Review Slider = 18.4 versions...

CVE-2026-66427: Improper Neutralization of Special Elements used in an SQL Command

Administrator SQL Injection in WP Google Review Slider = 18.4 versions...

CVE-2026-65456

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

CVE-2026-57699

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

CVE-2026-65456 WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

CVE-2026-65456 WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

CVE-2026-65456

CVE-2026-65456 affects the WordPress plugin Product Slider for WooCommerce (versions

EUVD-2026-48221

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

CVE-2026-57699

The CVE-2026-57699 entry concerns the WordPress Slider Pro plugin (versions ≤ 4.8.13) with a Cross Site Scripting (XSS) vulnerability affecting subscribers. The Patchstack-backed details identify the affected component and vulnerability type, with a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/...

CVE-2026-57699 WordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

EUVD-2026-48172

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

CVE-2026-57699 WordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

PT-2026-63879

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

PT-2026-63830

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

CVE-2026-57699: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

CVE-2026-65456: Authorization Bypass Through User-Controlled Key

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Product Slider for WooCommerce versions = 1.13.62...

WordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by manop55555 in WordPress Plugin Slider Pro versions = 4.8.13...

CVE-2026-15651

The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via the 'filtersource' parameter in all versions up to, and including, 14.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2026-15651

The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via the 'filtersource' parameter in all versions up to, and including, 14.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...