Lucene search
+L

5637 matches found

Cvelist
Cvelist
•added 2026/03/05 5:54 a.m.•47 views

CVE-2026-28109 WordPress LambertGroup - AllInOne - Content Slider plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Reflected XSS.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through = 3.8...

7.1CVSS0.00261EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/05 5:54 a.m.•46 views

CVE-2026-28109

Summary: CVE-2026-28109 is a reflected XSS vulnerability in LambertGroup AllInOne - Content Slider (plugin) for WordPress, with impact described as Cross-site Scripting and affected versions up to 3.8. Affected component: LambertGroup – AllInOne – Content Slider (WordPress plugin). Root cause (as...

7.1CVSS5.8AI score0.00261EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/05 5:54 a.m.•8 views

CVE-2026-28101

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup UberSlider MouseInteraction uberSlidermouseinteraction allows Reflected XSS.This issue affects UberSlider MouseInteraction: from n/a through = 2.3...

5.9AI score0.00261EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/05 5:54 a.m.•7 views

CVE-2026-28100

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup UberSlider PerpetuumMobile uberSliderperpetuummobile allows Reflected XSS.This issue affects UberSlider PerpetuumMobile: from n/a through = 2.3...

5.9AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•35 views

PT-2026-23375

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup UberSlider PerpetuumMobile uberSlider perpetuummobile allows Reflected XSS.This issue affects UberSlider PerpetuumMobile: from n/a through = 2.3...

5.9AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•31 views

PT-2026-23383

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Reflected XSS.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through = 3.8...

5.9AI score0.00261EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•4 views

CVE-2026-28109: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Reflected XSS.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through = 3.8...

7.1CVSS5.8AI score0.00261EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•21 views

WordPress plugin LambertGroup - AllInOne - Content Slider 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.7AI score0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•25 views

PT-2026-23377

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup UberSlider Classic uberSlider classic allows Reflected XSS.This issue affects UberSlider Classic: from n/a through = 2.5...

5.9AI score0.00261EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/03/02 12:00 a.m.•13 views

WordPress Slider‑Future 1.0.5 Exposure Scanner

This Metasploit auxiliary module is designed to detect exposure of the WordPress Slider‑Future plugin REST endpoint at /wp-json/slider-future/v1/upload-image/. The module performs a non-intrusive HTTP request OPTIONS method to determine whether the endpoint is accessible. It does not upload files...

5.9AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2026/02/27 12:00 a.m.•255 views

📄 WordPress Slider‑Future 1.0.5 Arbitrary File Upload

This is a Metasploit module that demonstrates an unauthenticated file upload vulnerability in WordPress Slider‑Future plugin version 1.0.5. ============================================================================================================================================= | Title :...

9.8CVSS5.9AI score0.03247EPSS
SaveExploits2
Patchstack
Patchstack
•added 2026/02/26 11:50 a.m.•23 views

WordPress LambertGroup - AllInOne - Content Slider plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress LambertGroup - AllInOne - Content Slider plugin = 3.8 - Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin LambertGroup - AllInOne - Content Slider versions = 3.8...

7.1CVSS5.9AI score0.00261EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/02/21 7:30 p.m.•13 views

CVE-2025-68000

Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimonial Slider: from n/a through = 2.0.15...

6.5CVSS5.5AI score0.00334EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/21 7:29 p.m.•24 views

CVE-2026-22346

Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object Injection.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through = 1.5.4...

8.8CVSS5.5AI score0.00365EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/02/20 10:12 p.m.•206 views

Exploit for CVE-2026-1405

CVE-2026-1405 Slider Future = 1.0.5 - Unauthenticated Arbi...

9.8CVSS6.5AI score0.03247EPSS
SaveExploits2
NVD
NVD
•added 2026/02/20 4:22 p.m.•28 views

CVE-2026-22346

Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object Injection.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through = 1.5.4...

8.8CVSS0.00365EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/20 4:22 p.m.•14 views

CVE-2025-68000

Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimonial Slider: from n/a through = 2.0.15...

6.5CVSS0.00334EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/20 3:47 p.m.•43 views

CVE-2026-22346 WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.5.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object Injection.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through = 1.5.4...

8.8CVSS0.00365EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/20 3:47 p.m.•11 views

CVE-2026-22346 WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.5.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object Injection.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through = 1.5.4...

8.8CVSS5.8AI score0.00365EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/20 3:47 p.m.•13 views

CVE-2026-22346

Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object Injection.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through = 1.5.4...

5.4AI score0.00365EPSS
SaveExploits0References2
Rows per page
Query Builder