WordPress Vertical Image Slider < 1.2.17 - Reflected Cross-Site Scripting

The plugin does not properly sanitize the 'searchterm' parameter, leading to Reflected Cross-Site Scripting vulnerability due to insufficient input sanitization and output escaping...

WordPress Product Slider For WooCommerce Lite Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Product Slider For WooCommerce Lite Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0537 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 5eb92cf8631c Credits...

WordPress Easy Slider Revolution Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Easy Slider Revolution Type Plugin Vulnerable versions = 1.0.0 Fixed in 1.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28622 Patch priority Medium CVSS severity Medium 5.9 Developer Claim ownership PSID e200bc473eac Credits Yuki Harum...

Layer Slider <= 1.1.9.7 - Cross-Site Request Forgery

The plugin does not adequately protect against Cross-Site Request Forgery CSRF attacks...

WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software vSlider Multi Image Slider for WordPress Type Plugin Vulnerable versions = 4.1.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-22672 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ebfb8daaae94...

WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Layer Slider Type Plugin Vulnerable versions = 1.1.9.7 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23671 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID fae9fc6a3884 Credits Rafshanzani Suhada...

CVE-2023-2120

The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2023-2120

The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2023-2120 Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting

The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

WordPress plugin Thumbnail carousel slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-17988 · WordPress · Thumbnail Carousel Slider

Name of the Vulnerable Software and Affected Versions: Thumbnail carousel slider plugin for WordPress versions up to, and including, 1.1.9 Description: The issue is related to Reflected Cross-Site Scripting via the search term parameter due to insufficient input sanitization and output escaping...

WordPress Thumbnail carousel slider Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Thumbnail carousel slider Type Plugin Vulnerable versions = 1.1.9 Fixed in 1.1.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2120 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID b8405ab8f136 Credits Marco...

CVE-2023-1473

The Slider, Gallery, and Carousel by MetaSlider WordPress plugin 3.29.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-0765

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin https://wordpress.org/plugins/slider-bws/ must...

CVE-2023-1473

The CVE-2023-1473 entry concerns the WordPress plugin MetaSlider (Slider, Gallery, and Carousel) version 3.29.0, where a parameter is not properly sanitized/escaped before being reflected in the page, leading to a Reflected XSS. Affected component: the MetaSlider plugin for WordPress. Root cause:...

CVE-2023-0765 Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin https://wordpress.org/plugins/slider-bws/ must...

Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks psfwlgutenblock headingtag='h2"...

PT-2023-17011 · WordPress · The Slider

Name of the Vulnerable Software and Affected Versions: The Slider, Gallery, and Carousel by MetaSlider WordPress plugin version 3.29.0 Description: The issue is related to a Reflected Cross-Site Scripting that could be used against high privilege users such as admin. This occurs because the plugi...

WordPress Meta Slider Plugin <= 3.29.0 is vulnerable to Cross Site Scripting (XSS)

Software Meta Slider Type Plugin Vulnerable versions = 3.29.0 Fixed in 3.29.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1473 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID da45ef75e742 Credits Erwan LR WPScan Required...

Cross site scripting

Auth. contributor+ Stored Cross-site Scripting XSS vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.12 versions...