4660 matches found
WordPress Slider a SlidersPack Plugin <= 2.0.2 is vulnerable to Broken Access Control
Software Slider a SlidersPack Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-46845 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b8f7f4a77e50 Credits Cat Required privilege...
CVE-2021-4424
The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0. This is due to missing or incorrect nonce validation on the qcsliderheroduplicate function. This makes it possible for unauthenticated attackers to duplicate slides via a forg...
Cross site request forgery (csrf)
The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0. This is due to missing or incorrect nonce validation on the qcsliderheroduplicate function. This makes it possible for unauthenticated attackers to duplicate slides via a forg...
CVE-2021-4424 Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypass
The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0. This is due to missing or incorrect nonce validation on the qcsliderheroduplicate function. This makes it possible for unauthenticated attackers to duplicate slides via a forg...
CVE-2021-4424
CVE-2021-4424 covers a CSRF vulnerability in the Slider Hero WordPress plugin (versions up to 8.2.0) caused by missing/incorrect nonce validation in qc_slider_hero_duplicate(). This allows unauthenticated attackers to duplicate slides via forged requests if a site admin is tricked. Affected softw...
CVE-2021-4424 Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypass
The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0. This is due to missing or incorrect nonce validation on the qcsliderheroduplicate function. This makes it possible for unauthenticated attackers to duplicate slides via a forg...
WordPress Plugin Slider Hero 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
PT-2023-12537 · WordPress · Slider Hero
Name of the Vulnerable Software and Affected Versions: Slider Hero plugin for WordPress versions up to and including 8.2.0 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the qc slider hero duplicate function. This allows...
CVE-2023-35778
Cross-Site Request Forgery CSRF vulnerability in Neha Goel Recent Posts Slider plugin = 1.1 versions...
CVE-2023-23671
Cross-Site Request Forgery CSRF vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...
CVE-2023-23671
Cross-Site Request Forgery CSRF vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...
CVE-2023-23671
CVE-2023-23671 is a CSRF vulnerability in the Muneeb Layer Slider plugin for WordPress, affecting versions
CVE-2023-23671 WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...
CVE-2023-23671 WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...
CVE-2023-35778
CVE-2023-35778 corresponds to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Recent Posts Slider (
WordPress Plugin Layer Slider 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2023-19115 · WordPress · Muneeb Layer Slider
Name of the Vulnerable Software and Affected Versions: Muneeb Layer Slider plugin versions = 1.1.9.7 Description: A Cross-Site Request Forgery CSRF issue affects the Muneeb Layer Slider plugin. This type of issue allows an attacker to perform unintended actions on a user's behalf. Recommendations...
WordPress Plugin Recent Posts Slider 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)
Software Layer Slider Type Plugin Vulnerable versions = 1.1.9.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23798 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID abdcf416630e Credits Rafshanzani Suhada Require...