Lucene search
+L

4643 matches found

CNNVD
CNNVD
added 2025/12/24 12:0 a.m.6 views

WordPress plugin YITH Slider for page builders 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS6.5AI score0.00178EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.7 views

WordPress plugin Prime Slider – Addons For Elementor 安全漏洞

WordPress Prime Slider - Addons For Elementor plugin is a free plugin for Elementor page builder designed to help users easily create various interactive responsive sliders. The WordPress Prime Slider - Addons For Elementor plugin suffers from a server-side request forgery vulnerability, which...

4.9CVSS6.8AI score0.0016EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/21 4:12 a.m.15 views

CVE-2025-14721

The Responsive and Swipe slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rsSlider shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.5CVSS5AI score0.00177EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/20 4:16 a.m.10 views

CVE-2025-14721

The Responsive and Swipe slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rsSlider shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.5CVSS0.00177EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/20 3:20 a.m.31 views

CVE-2025-14721 Responsive and Swipe slider <= 1.0.2 - Authenticated (Editor+) Stored Cross-Site Scripting via Shortcode

The Responsive and Swipe slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rsSlider shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.5CVSS0.00177EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/20 3:20 a.m.29 views

CVE-2025-14721

CVE-2025-14721 affects the WordPress plugin Responsive and Swipe Slider . It exposes a Stored Cross-Site Scripting (XSS) vulnerability via the plugin’s rsSlider shortcode in all versions up to and including 1.0.2, due to insufficient input sanitization and output escaping on user-supplied attribu...

5.5CVSS4.7AI score0.00177EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/20 12:0 a.m.8 views

PT-2025-52543

Name of the Vulnerable Software and Affected Versions Responsive and Swipe slider plugin for WordPress versions prior to 1.0.3 Description The plugin is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping of user-supplied attributes within the...

5.5CVSS5.3AI score0.00177EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/12/20 12:0 a.m.10 views

WordPress plugin Responsive and Swipe slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.5CVSS5.8AI score0.00177EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/12/19 10:3 p.m.13 views

WordPress Responsive and Swipe slider plugin <= 1.0.2 - Authenticated (Editor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Editor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Bhumividh Treloges in WordPress Plugin RESPONSIVE AND SWIPE SLIDER! versions = 1.0.2...

5.5CVSS5.5AI score0.00177EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/19 1:9 p.m.20 views

CVE-2025-14277

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the importelementortemplate AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make we...

4.3CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/18 9:44 p.m.15 views

WordPress Prime Slider – Addons for Elementor plugin <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery vulnerability

Authenticated Subscriber+ Server-Side Request Forgery vulnerability discovered by Deadbee - NA in WordPress Plugin Prime Slider – Addons For Elementor versions = 4.0.9...

4.3CVSS6.8AI score0.00287EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/12/18 1:15 p.m.12 views

CVE-2025-14277

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the importelementortemplate AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make we...

4.3CVSS0.00287EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/18 12:22 p.m.6 views

CVE-2025-14277 Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the importelementortemplate AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make we...

4.3CVSS5.4AI score0.00287EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/18 12:22 p.m.41 views

CVE-2025-14277 Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the importelementortemplate AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make we...

4.3CVSS0.00287EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 12:22 p.m.9 views

EUVD-2025-204265

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the importelementortemplate AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make we...

4.3CVSS5.4AI score0.00287EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/18 12:22 p.m.23 views

CVE-2025-14277

Technical details about CVE-2025-14277 (SSRF in Prime Slider Addons for Elementor) are not publicly provided in the supplied documents; monitor for updates.

4.3CVSS5.4AI score0.00287EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.16 views

PT-2025-52216

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the import elementor template AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make...

4.3CVSS5.8AI score0.00287EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.7 views

WordPress plugin Prime Slider 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

4.3CVSS6.6AI score0.00287EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/17 10:3 a.m.9 views

CVE-2025-64237

Cross-Site Request Forgery CSRF vulnerability in Graham Quick Interest Slider quick-interest-slider allows Cross Site Request Forgery.This issue affects Quick Interest Slider: from n/a through = 3.1.5...

4.3CVSS6.9AI score0.00125EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/16 9:31 a.m.8 views

EUVD-2025-203613

Cross-Site Request Forgery CSRF vulnerability in Graham Quick Interest Slider quick-interest-slider allows Cross Site Request Forgery.This issue affects Quick Interest Slider: from n/a through = 3.1.5...

4.3CVSS6.3AI score0.00125EPSS
SaveExploits0References2
Rows per page
Query Builder