4660 matches found
CVE-2023-47755
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AazzTech WooCommerce Product Carousel Slider plugin = 3.3.5 versions...
CVE-2023-47755
CVE-2023-47755: AzzTech WooCommerce Product Carousel Slider plugin
CVE-2023-5466
The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2023-5466
The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
Sql injection
The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2023-5466 Wp anything slider <= 9.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2023-5466
CVE-2023-5466 affects the WordPress plugin WP Anything Slider, up to version 9.1. The issue is an SQL Injection due to insufficient escaping of user-supplied shortcode parameters and lack of proper query preparation, enabling authenticated attackers with subscriber-level+ permissions to inject ad...
WordPress Plugin Wp anything slider security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2023-30589 · Aazztech · Aazztech Woocommerce Product Carousel Slider
Name of the Vulnerable Software and Affected Versions: AazzTech WooCommerce Product Carousel Slider plugin versions prior to 3.3.6 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For version...
WordPress Plugin WooCommerce Product Carousel Slider Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2023-32121 · WordPress · Wp Anything Slider Plugin
Name of the Vulnerable Software and Affected Versions: Wp anything slider plugin for WordPress versions up to, and including, 9.1 Description: The issue arises from insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the plugin's...
CVE-2023-47772
Contributor+ Stored Cross-Site Scripting XSS vulnerability in Slider Revolution = 6.6.14...
CVE-2023-47772
Contributor+ Stored Cross-Site Scripting XSS vulnerability in Slider Revolution = 6.6.14...
Cross site scripting
Contributor+ Stored Cross-Site Scripting XSS vulnerability in Slider Revolution = 6.6.14...
CVE-2023-47772 WordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS)
Contributor+ Stored Cross-Site Scripting XSS vulnerability in Slider Revolution = 6.6.14...
CVE-2023-47772
CVE-2023-47772 affects the WordPress plugin Slider Revolution (revslider) up to version 6.6.14 . The issue is a Stored Cross-Site Scripting (XSS) vulnerability caused by insufficient input sanitization/output escaping in authenticated scenarios (Contributor+). Public exploitation details are not ...
WordPress Plugin Slider Revolution Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
WordPress Ultimate Responsive Image Slider Plugin <= 3.5.11 is vulnerable to Broken Access Control
Software Ultimate Responsive Image Slider Type Plugin Vulnerable versions = 3.5.11 Fixed in 3.5.12 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 459fe6b17b6d Credits Unknown Required...