Lucene search
K

144 matches found

NVD
NVD
added last week10 views

CVE-2026-2021

The Slideshow Gallery LITE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alwaysauto' shortcode attribute in all versions up to, and including, 1.8.5. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible...

6.4CVSS0.00205EPSS
Exploits0References6
EUVD
EUVD
added 2026/06/18 8:31 a.m.11 views

EUVD-2026-37868

The Slideshow Gallery LITE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alwaysauto' shortcode attribute in all versions up to, and including, 1.8.5. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible...

6.4CVSS5.6AI score0.00205EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/06/18 8:31 a.m.21 views

CVE-2026-2021 Slideshow Gallery LITE <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alwaysauto' Shortcode Attribute

The Slideshow Gallery LITE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alwaysauto' shortcode attribute in all versions up to, and including, 1.8.5. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible...

6.4CVSS0.00205EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/06/18 8:31 a.m.6 views

CVE-2026-2021

The Slideshow Gallery LITE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alwaysauto' shortcode attribute in all versions up to, and including, 1.8.5. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible...

6.4CVSS5.5AI score0.00205EPSS
Exploits0References7
CVE
CVE
added 2026/06/18 8:31 a.m.16 views

CVE-2026-2021

The CVE concerns the WordPress Slideshow Gallery LITE plugin (versions

6.4CVSS5.5AI score0.00205EPSS
Exploits0References6
Patchstack
Patchstack
added 2026/06/17 8:0 p.m.7 views

WordPress Slideshow Gallery LITE plugin <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Slideshow Gallery versions = 1.8.5...

6.4CVSS5.2AI score0.00205EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-9756

Malware in sbrugna...

6.1CVSS6.7AI score0.01021EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-9757

Malware in sbrugna...

9.8CVSS9.5AI score0.02193EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-11794

Malware in sbrugna...

4.8CVSS5.2AI score0.00598EPSS
Exploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-9687

Malware in sbrugna...

6.1CVSS6.3AI score0.00844EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-9758

Malware in sbrugna...

6.1CVSS6.7AI score0.01021EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-45708

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00285EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-29251

Malicious code in bioql PyPI...

8.5CVSS8.9AI score0.00517EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-29249

Malicious code in bioql PyPI...

5.3CVSS8.8AI score0.0047EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-42412

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.00251EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-32167

Malicious code in bioql PyPI...

8.8CVSS8.7AI score0.00284EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-32161

Malicious code in bioql PyPI...

7.2CVSS7.4AI score0.00762EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-29250

Malicious code in bioql PyPI...

4.3CVSS8.8AI score0.002EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/17 3:24 p.m.14 views

CVE-2025-49897

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Vertical scroll slideshow gallery v2 allows Blind SQL Injection. This issue affects Vertical scroll slideshow gallery v2: from n/a through 9.1...

8.8CVSS5.6AI score0.00389EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/15 3:13 p.m.9 views

CVE-2025-49897 WordPress Vertical scroll slideshow gallery v2 plugin <= 9.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Vertical scroll slideshow gallery v2 allows Blind SQL Injection. This issue affects Vertical scroll slideshow gallery v2: from n/a through 9.1...

8.8CVSS0.00389EPSS
Exploits0References1
Rows per page
Query Builder