Lucene search
+L

5665 matches found

Cvelist
Cvelist
•added 2025/03/31 12:55 p.m.•36 views

CVE-2025-31584 WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elfsight Testimonials Slider: from n/a through = 1.0.1...

5.4CVSS0.0032EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/31 12:55 p.m.•74 views

CVE-2025-31529

CVE-2025-31529: Missing Authorization in Rashid Slider Path for Elementor affects Slider Path for Elementor up to version 3.0.0. Impact per CVSS 3.1: Network access, Privileges Required: Low, User Interaction: None, Confidentiality: None, Integrity: Low, Availability: None. Affected software is t...

4.3CVSS7.2AI score0.00283EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/31 12:55 p.m.•11 views

CVE-2025-31529 WordPress Slider Path for Elementor plugin <= 3.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Rashid Slider Path for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Slider Path for Elementor: from n/a through 3.0.0...

4.3CVSS7AI score0.00283EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•3 views

PT-2025-13732

Name of the Vulnerable Software and Affected Versions Elfsight Testimonials Slider versions n/a through 1.0.1 Description The issue is related to a lack of authorization in the Elfsight Testimonials Slider, which allows exploitation of incorrectly configured access control security levels...

5.4CVSS0.0032EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•13 views

WordPress plugin Elfsight Testimonials Slider 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

5.9CVSS7.4AI score0.00264EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•7 views

PT-2025-13736

Name of the Vulnerable Software and Affected Versions Elfsight Testimonials Slider versions 1.0.1 and earlier Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing...

5.4CVSS0.00154EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•3 views

PT-2025-13702

Name of the Vulnerable Software and Affected Versions Rashid Slider Path for Elementor versions n/d through 3.0.0 Description The issue is related to a lack of authorization in Rashid Slider Path for Elementor, which allows exploiting incorrectly configured access control security levels...

4.3CVSS0.00283EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•14 views

WordPress plugin Elfsight Testimonials Slider 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

5.4CVSS8.1AI score0.00154EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•5 views

PT-2025-13735

Name of the Vulnerable Software and Affected Versions Elfsight Testimonials Slider versions 1.0.0 through 1.0.1 Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means an attacker can inject...

5.9CVSS0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•3 views

CVE-2025-31588: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Cross Site Request Forgery.This issue affects Elfsight Testimonials Slider: from n/a through = 1.0.1...

5.4CVSS5.8AI score0.00154EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•4 views

CVE-2025-31584: Missing Authorization

Missing Authorization vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elfsight Testimonials Slider: from n/a through = 1.0.1...

5.4CVSS5.9AI score0.0032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•9 views

CVE-2025-31569: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wp-buy wordpress related Posts with thumbnails related-posts-list-grid-and-slider-all-in-one allows Stored XSS.This issue affects wordpress related Posts with thumbnails: from n/a through = 3.0.0.1...

7.1CVSS5.8AI score0.00143EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•2 views

CVE-2025-31529: Missing Authorization

Missing Authorization vulnerability in Rashid Slider Path for Elementor slider-path allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Path for Elementor: from n/a through = 3.0.0...

4.3CVSS5.9AI score0.00283EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•5 views

CVE-2025-31587: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Stored XSS.This issue affects Elfsight Testimonials Slider: from n/a through = 1.0.1...

5.9CVSS5.8AI score0.00264EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•13 views

WordPress plugin Slider Path for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

4.3CVSS8.4AI score0.00283EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/30 3:28 p.m.•24 views

CVE-2025-22575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in extendyourweb SUPER RESPONSIVE SLIDER super-slider allows Reflected XSS.This issue affects SUPER RESPONSIVE SLIDER: from n/a through = 1.4...

7.1CVSS7.2AI score0.00238EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/30 10:19 a.m.•30 views

CVE-2025-31099

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in bestweblayout Slider by BestWebSoft slider-bws allows SQL Injection.This issue affects Slider by BestWebSoft: from n/a through = 1.1.0...

7.6CVSS7.3AI score0.00338EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/29 2:28 p.m.•18 views

CVE-2025-26738

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Graham Quick Interest Slider quick-interest-slider allows DOM-Based XSS.This issue affects Quick Interest Slider: from n/a through = 3.1.5...

6.5CVSS7.2AI score0.00222EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/29 11:39 a.m.•15 views

CVE-2025-30783

Cross-Site Request Forgery CSRF vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows SQL Injection.This issue affects WP Google Review Slider: from n/a through = 16.0...

8.2CVSS7.3AI score0.00225EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/28 3:15 p.m.•21 views

CVE-2025-22575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in extendyourweb SUPER RESPONSIVE SLIDER super-slider allows Reflected XSS.This issue affects SUPER RESPONSIVE SLIDER: from n/a through = 1.4...

7.1CVSS0.00238EPSS
SaveExploits0References1
Rows per page
Query Builder