WordPress Plugin Team Circle Image Slider With Lightbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Slider Revolution Plugin <= 6.6.12 is vulnerable to Arbitrary File Upload

Software Slider Revolution Type Plugin Vulnerable versions = 6.6.12 Fixed in 6.6.13 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Upload CVE CVE-2023-2359 Patch priority Low CVSS severity Low 9.1 Developer ThemePunch PSID 48e5307584b9 Credits Marco Frison Required privilege...

CVE-2022-45372

Cross-Site Request Forgery CSRF vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin = 2.2.8 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin = 2.2.8 versions...

CVE-2022-45372

CVE-2022-45372 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Codeixer Product Gallery Slider for WooCommerce plugin for WordPress, affecting versions up to 2.2.8. The issue arises from CSRF in the plugin, enabling unauthorized actions within an authenticated session. Public r...

CVE-2022-45372 WordPress Product Gallery Slider for WooCommerce Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin = 2.2.8 versions...

CVE-2022-45372 WordPress Product Gallery Slider for WooCommerce Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin = 2.2.8 versions...

WordPress Plugin Product Gallery Slider for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Revolution Slider <= 6.6.12 - Author+ Remote Code Execution

The plugin does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations. By default, the import functionality is only available to Admin users. However, the plugin may be configured to allow...

Revolution Slider <= 6.6.12 - Author+ Remote Code Execution

The plugin does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations. By default, the import functionality is only available to Admin users. However, the plugin may be configured to allow...

CVE-2023-23890

Cross-Site Request Forgery CSRF vulnerability in LJ Apps WP Airbnb Review Slider plugin = 3.2 versions...

CVE-2023-24414

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.11 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in LJ Apps WP Airbnb Review Slider plugin = 3.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.11 versions...

CVE-2023-23890 WordPress WP Airbnb Review Slider Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in LJ Apps WP Airbnb Review Slider plugin = 3.2 versions...

CVE-2023-23890

CVE-2023-23890 affects the WordPress plugin WP Airbnb Review Slider (LJ Apps) versioned up to 3.2. The vulnerability is a Cross-Site Request Forgery (CSRF) that can lead to reviews being removed; Patch details indicate the issue is exploitable by an unauthenticated attacker and is fixed in versio...

CVE-2023-24414

CVE-2023-24414 : The Robo Gallery plugin (RoboSoft Photo Gallery, Images, Slider) for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability in versions

WordPress plugin WP Airbnb Review Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP Airbnb...

Cross site scripting

The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

PT-2023-20954 · WordPress · Video Carousel Slider With Lightbox

Name of the Vulnerable Software and Affected Versions: Video Carousel Slider with Lightbox plugin for WordPress versions up to, and including, 1.0.22 Description: The issue is related to Reflected Cross-Site Scripting via the search term parameter due to insufficient input sanitization and output...