4643 matches found
CVE-2015-9417
The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS...
Cross site scripting
The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter...
CVE-2015-9419
The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section...
CVE-2015-9419
CVE-2015-9419 affects the Captain Slider WordPress plugin, version 1.0.6, which is vulnerable to cross-site scripting via a Title or Caption section. The NVD records CVSS v2 base score 4.3 (MEDIUM) and CVSS v3.1 base score 6.1 (MEDIUM). No exploitation status or patches are detailed in the provid...
CVE-2015-9417
The CVE-2015-9417 entry concerns the WordPress plugin testimonial-slider (versions up to 1.2.1). A CSRF vulnerability enables a cross-site scripting (XSS) condition in this plugin. Some connected sources indicate exploitation requires privileged access (administrator level) and that the XSS can b...
CVE-2015-9417
The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS...
CVE-2015-9412
CVE-2015-9412 affects the WordPress plugin Royal-Slider (vulnerable: before 3.2.7). The issue is an XSS in the site’s admin UI via the rstype parameter when creating/editing a slider. Several connected sources corroborate: Red Hat and CNVD entries describe the same XSS in the Royal-Slider plugin;...
WordPreess Crelly Slider Plugin < 1.3.5 Arbitrary File Upload Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113512";...
WordPress crelly-slider plugin code issue vulnerability
WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. crelly-slider is an open source responsive slider plugin used in it. A code issue vulnerability exists in the WordPress...
CVE-2019-15866
The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...
Default credentials
The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...
CVE-2019-15866
The CVE-2019-15866 entry concerns the WordPress crelly-slider plugin. Concrete details from connected documents show: the plugin before 1.3.5 permits arbitrary file upload by placing a PHP file inside a ZIP archive and sending it to wp_ajax_crellyslider_importSlider. This is a remote vulnerabilit...
CVE-2019-15866
The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...
WordPress Crelly Slider plugin <= 1.3.4 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability found by NinTechNet in WordPress Crelly Slider plugin versions = 1.3.4. Solution Update the WordPress Crelly Slider plugin to the latest available version at least 1.3.5...
Crelly Slider <= 1.3.4 - Arbitrary File Upload
The Crelly Slider WordPress plugin was affected by an Arbitrary File Upload security vulnerability...
Joomla Ari Image Slider CSRF Backdoor Access Vulnerability
Joomla is an open source content management system CMS. A CSRF backdoor access vulnerability exists in Joomla Ari Image Slider. An attacker can exploit the vulnerability to spoof a client to make an unintentional request to the web server, which may result in data exposure or unintended code...
Joomla ARI Image Slider 2.2.0 Cross Site Request Forgery / Shell Upload
Exploit Title : Joomla ARI Image Slider 2.2.0 CSRF Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 27/03/2019 Vendor Homepage : ari-soft.com Software Download Link : ari-soft.com/Joomla-Components/ARI-Image-Slider/Detailed-product-flyer.html Softwar...
WordPress WP-Image-News-Slider 3.3 Cross Site Request Forgery / Shell Upload
Exploit Title : WordPress WP-Image-News-Slider Plugins 3.3 CSRF Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 05/03/2019 Vendor Homepage : wpslideshow.com Software Information Link : wpslideshow.com/newsimage-slider/ Software Affected Versions : 3...
WordPress Jssor-Slider 3.1.24 Cross Site Request Forgery / File Upload
Exploit Title : WordPress Jssor-Slider Plugins 3.1.24 CSRF Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : jssor.com drcsystems.com ethicsolutions.com Software Download Link :...