CVE-2018-5372

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

Sql injection

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

Sql injection

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

Sql injection

The Smooth Slider plugin through 2.8.6 for WordPress has SQL Injection via smooth-slider.php trid parameter...

CVE-2018-5374

CVE-2018-5374 affects WordPress Dbox 3D Slider Lite plugin (

CVE-2018-5373

The Smooth Slider plugin through 2.8.6 for WordPress has SQL Injection via smooth-slider.php trid parameter...

CVE-2018-5373

The CVE-2018-5373 entry applies to the WordPress plugin Smooth Slider up to version 2.8.6, which is vulnerable to SQL Injection via smooth-slider.php with the trid parameter. The root cause involves the use of $wpdb->get_var() without proper input sanitization, enabling an attacker with releva...

CVE-2018-5372

The CVE-2018-5372 entry corresponds to an SQL Injection vulnerability in WordPress plugins’ Testimonial Slider (up to version 1.2.4). Affected component: the Testimonial Slider WordPress plugin, with the vulnerability located in settings/sliders.php via the current_slider_id parameter, due to uns...

WordPress Testimonial Slider plugin <=1.2.4 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability found by DefenceCode in WordPress Testimonial Slider plugin versions =1.2.4. Solution Update the WordPress Testimonial Slider plugin to the latest version at least 1.2.5...

WordPress Dbox 3D Slider Lite 1.2.2 SQL Injection

DefenseCode ThunderScan SAST Advisory: WordPress Dbox 3D Slider Lite Multiple SQL injection Security Vulnerabilities Advisory ID: DC-2017-01-003 Advisory Title: WordPress Dbox 3D Slider Lite Plugin Multiple SQL injection Security Vulnerabilities Advisory URL:...

WordPress Smooth Slider 2.8.6 SQL Injection

DefenseCode ThunderScan SAST Advisory: WordPress Smooth Slider Plugin SQL injection Security Vulnerability Advisory ID: DC-2018-01-004 Advisory Title: WordPress Smooth Slider Plugin SQL injection Security Vulnerability Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress...

WordPress Testimonial Slider plugin <=1.2.4 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability found by DefenceCode in WordPress Testimonial Slider plugin versions =1.2.4. Solution Update the WordPress Testimonial Slider plugin to the latest version at least 1.2.5...

WordPress Testimonial Slider 1.2.4 SQL Injection

DefenseCode ThunderScan SAST Advisory: WordPress Testimonial Slider Plugin SQL injection Security Vulnerability Advisory ID: DC-2018-01-005 Advisory Title: WordPress Testimonial Slider Plugin SQL injection Security Vulnerability Advisory URL: http://www.defensecode.com/advisories.php Software:...

WordPress Dbox 3D Slider Lite plugin <=1.2.2 - Multiple Authenticated SQL injection vulnerabilities

Multiple Authenticated SQL injection vulnerabilities found by DefenseCode in WordPress Dbox 3D Slider Lite plugin versions =1.2.2. Solution 1/11/2018 - we were unable to find a patched version of this plugin. Latest version released two years ago...

Testimonial Slider <= 1.2.4 - Authenticated SQL Injection

During the security analysis, ThunderScan discovered SQL injection vulnerability in Testimonial Slider WordPress plugin. The easiest way to reproduce the vulnerability is to visit the provided URL while being logged in as administrator or another user that is authorized to access the plugin...

Dbox 3D Slider Lite <= 1.2.2 - Multiple Authenticated SQL injection

During the security analysis, ThunderScan discovered SQL injection vulnerabilities in Dbox 3D Slider Lite WordPress plugin. The easiest way to reproduce the vulnerabilities is to modify the POST request for the slider rename or reorder and append parts of the SQL query to the currentsliderid...

Muslim Matrimonial Script Cross-Site Scripting Vulnerability

Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. A cross-site scripting vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script. The vulnerability can be exploited to conduct cross-site scripting attacks via the...

CVE-2017-17981

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...

Insecure Random Number Generation

slider-core is vulnerable to insecure random number generation. AggregateConf.java and SecurityUtils.java uses the RandomStringUtils.randomAlphanumeric function which is cryptographically weak...

Tor Project Brings Security Slider Feature to Android App Orfox

Tor Project developers recently bolstered Orfox, a Tor Browser for Android devices, to help privacy-conscious mobile browsers better customize their security. Tor Project developers partnered with the Guardian Project to release the first iteration of the app last December. It’s essentially an...