CVE-2015-9417

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS...

CVE-2015-9417

The CVE-2015-9417 entry concerns the WordPress plugin testimonial-slider (versions up to 1.2.1). A CSRF vulnerability enables a cross-site scripting (XSS) condition in this plugin. Some connected sources indicate exploitation requires privileged access (administrator level) and that the XSS can b...

CVE-2015-9412

CVE-2015-9412 affects the WordPress plugin Royal-Slider (vulnerable: before 3.2.7). The issue is an XSS in the site’s admin UI via the rstype parameter when creating/editing a slider. Several connected sources corroborate: Red Hat and CNVD entries describe the same XSS in the Royal-Slider plugin;...

WordPreess Crelly Slider Plugin < 1.3.5 Arbitrary File Upload Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113512";...

WordPress crelly-slider plugin code issue vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. crelly-slider is an open source responsive slider plugin used in it. A code issue vulnerability exists in the WordPress...

CVE-2019-15866

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...

Default credentials

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...

CVE-2019-15866

The CVE-2019-15866 entry concerns the WordPress crelly-slider plugin. Concrete details from connected documents show: the plugin before 1.3.5 permits arbitrary file upload by placing a PHP file inside a ZIP archive and sending it to wp_ajax_crellyslider_importSlider. This is a remote vulnerabilit...

CVE-2019-15866

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...

WordPress Crelly Slider plugin <= 1.3.4 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability found by NinTechNet in WordPress Crelly Slider plugin versions = 1.3.4. Solution Update the WordPress Crelly Slider plugin to the latest available version at least 1.3.5...

Crelly Slider <= 1.3.4 - Arbitrary File Upload

The Crelly Slider WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Joomla Ari Image Slider CSRF Backdoor Access Vulnerability

Joomla is an open source content management system CMS. A CSRF backdoor access vulnerability exists in Joomla Ari Image Slider. An attacker can exploit the vulnerability to spoof a client to make an unintentional request to the web server, which may result in data exposure or unintended code...

Joomla ARI Image Slider 2.2.0 Cross Site Request Forgery / Shell Upload

Exploit Title : Joomla ARI Image Slider 2.2.0 CSRF Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 27/03/2019 Vendor Homepage : ari-soft.com Software Download Link : ari-soft.com/Joomla-Components/ARI-Image-Slider/Detailed-product-flyer.html Softwar...

WordPress WP-Image-News-Slider 3.3 Cross Site Request Forgery / Shell Upload

Exploit Title : WordPress WP-Image-News-Slider Plugins 3.3 CSRF Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 05/03/2019 Vendor Homepage : wpslideshow.com Software Information Link : wpslideshow.com/newsimage-slider/ Software Affected Versions : 3...

WordPress Jssor-Slider 3.1.24 Cross Site Request Forgery / File Upload

Exploit Title : WordPress Jssor-Slider Plugins 3.1.24 CSRF Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : jssor.com drcsystems.com ethicsolutions.com Software Download Link :...

CVE-2018-20368

The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback...

CVE-2018-20368

The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback...

CVE-2018-20368

CVE-2018-20368 affects the WordPress Master Slider plugin (versions around 3.2.7 and 3.5.1) and causes an XSS via the wp-admin/admin-ajax.php Name input field in the MSPanel.Settings value during Callback. The connected sources consistently describe it as a cross‑site scripting vulnerability in M...

CVE-2018-20368

The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback...

Joomla DJ Image Slider 3.2.3 Database Disclosure

Exploit Title : Joomla comdjimageslider Components All in One 3.2.3 Database Backup Information Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : joomla.org dj-extensions.com Tested On : Windows and Linux Software Download Lin...