Lucene search
+L

4660 matches found

Patchstack
Patchstack
added 2023/07/17 12:0 a.m.13 views

WordPress Slider a SlidersPack Plugin <= 2.0.2 is vulnerable to Broken Access Control

Software Slider a SlidersPack Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-46845 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b8f7f4a77e50 Credits Cat Required privilege...

6.3AI score0.00298EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/07/12 7:15 a.m.19 views

CVE-2021-4424

The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0. This is due to missing or incorrect nonce validation on the qcsliderheroduplicate function. This makes it possible for unauthenticated attackers to duplicate slides via a forg...

4.3CVSS4.2AI score0.00393EPSS
SaveExploits0References9
Prion
Prion
added 2023/07/12 7:15 a.m.15 views

Cross site request forgery (csrf)

The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0. This is due to missing or incorrect nonce validation on the qcsliderheroduplicate function. This makes it possible for unauthenticated attackers to duplicate slides via a forg...

4.3CVSS4.3AI score0.00393EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2023/07/12 6:52 a.m.36 views

CVE-2021-4424 Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypass

The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0. This is due to missing or incorrect nonce validation on the qcsliderheroduplicate function. This makes it possible for unauthenticated attackers to duplicate slides via a forg...

4.3CVSS4.6AI score0.00393EPSS
SaveExploits0References9
CVE
CVE
added 2023/07/12 6:52 a.m.54 views

CVE-2021-4424

CVE-2021-4424 covers a CSRF vulnerability in the Slider Hero WordPress plugin (versions up to 8.2.0) caused by missing/incorrect nonce validation in qc_slider_hero_duplicate(). This allows unauthenticated attackers to duplicate slides via forged requests if a site admin is tricked. Affected softw...

4.3CVSS4.2AI score0.00393EPSS
SaveExploits0References9Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/12 6:52 a.m.23 views

CVE-2021-4424 Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypass

The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0. This is due to missing or incorrect nonce validation on the qcsliderheroduplicate function. This makes it possible for unauthenticated attackers to duplicate slides via a forg...

4.3CVSS5.8AI score0.00393EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2023/07/12 12:0 a.m.8 views

WordPress Plugin Slider Hero 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

4.3CVSS5AI score0.00393EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/07/12 12:0 a.m.12 views

PT-2023-12537 · WordPress · Slider Hero

Name of the Vulnerable Software and Affected Versions: Slider Hero plugin for WordPress versions up to and including 8.2.0 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the qc slider hero duplicate function. This allows...

4.3CVSS4.5AI score0.00393EPSS
SaveExploits0References11
OSV
OSV
added 2023/07/11 12:15 p.m.9 views

CVE-2023-35778

Cross-Site Request Forgery CSRF vulnerability in Neha Goel Recent Posts Slider plugin = 1.1 versions...

6.5CVSS7.3AI score0.0022EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/11 12:15 p.m.9 views

CVE-2023-23671

Cross-Site Request Forgery CSRF vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

6.5CVSS7.3AI score0.00257EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/11 12:15 p.m.25 views

CVE-2023-23671

Cross-Site Request Forgery CSRF vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

7.1CVSS7AI score0.00257EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/11 12:15 p.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

4.3CVSS6.6AI score0.00257EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/07/11 11:22 a.m.43 views

CVE-2023-23671

CVE-2023-23671 is a CSRF vulnerability in the Muneeb Layer Slider plugin for WordPress, affecting versions

7.1CVSS6.7AI score0.00257EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/11 11:22 a.m.34 views

CVE-2023-23671 WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

7.1CVSS7.2AI score0.00257EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/11 11:22 a.m.16 views

CVE-2023-23671 WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Layer Slider plugin = 1.1.9.7 versions...

7.1CVSS7.1AI score0.00257EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/11 11:11 a.m.49 views

CVE-2023-35778

CVE-2023-35778 corresponds to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Recent Posts Slider (

6.5CVSS5.7AI score0.0022EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/07/11 12:0 a.m.15 views

WordPress Plugin Layer Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS7AI score0.00257EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.12 views

PT-2023-19115 · WordPress · Muneeb Layer Slider

Name of the Vulnerable Software and Affected Versions: Muneeb Layer Slider plugin versions = 1.1.9.7 Description: A Cross-Site Request Forgery CSRF issue affects the Muneeb Layer Slider plugin. This type of issue allows an attacker to perform unintended actions on a user's behalf. Recommendations...

7.1CVSS7AI score0.00257EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/07/11 12:0 a.m.9 views

WordPress Plugin Recent Posts Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

6.5CVSS6.9AI score0.0022EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/06/28 12:0 a.m.24 views

WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)

Software Layer Slider Type Plugin Vulnerable versions = 1.1.9.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23798 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID abdcf416630e Credits Rafshanzani Suhada Require...

6.5CVSS5.8AI score0.0037EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder