Slideshow Gallery < 1.7.9 - Settings Reset via CSRF

Description The plugin does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

CVE-2024-31355

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31355 WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31355 WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31355

CVE-2024-31355 is an authenticated SQL injection vulnerability in the Tribulant Slideshow Gallery plugin for WordPress, affecting Slideshow Gallery LITE up to version 1.7.8. An attacker with at least Contributor+ privileges can exploit the flaw to manipulate the SQL query, potentially impacting c...

CVE-2024-31353

Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31353

Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31353 WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31353

CVE-2024-31353 : Affects Slideshow Gallery LITE (WordPress plugin) ≤ 1.7.8. The Wordfence entry confirms an unauthenticated information exposure vulnerability (insertion of sensitive information into log files). No exploitation details are provided in the connected docs, and the patch status for ...

CVE-2024-31353 WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

WordPress Plugin Slideshow Gallery LITE SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Slideshow Gallery...

WordPress Plugin Slideshow Gallery LITE 日志信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Slideshow Gallery LITE A l...

PT-2024-23997 · Tribulant · Tribulant Slideshow Gallery

Name of the Vulnerable Software and Affected Versions: Tribulant Slideshow Gallery versions 1.7.8 and earlier Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. Recommendations: For versions 1.7.8 and earlier,...

WordPress Slideshow Gallery LITE plugin <= 1.7.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Slideshow Gallery versions = 1.7.8...

WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Slideshow Gallery versions = 1.7.8...

WordPress Slideshow Gallery LITE plugin <= 1.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Slideshow Gallery versions = 1.8...

WordPress Slideshow Gallery Plugin <= 1.7.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Slideshow Gallery Type Plugin Vulnerable versions = 1.7.8 Fixed in 1.7.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31354 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID fa0ba59d923d Credits Ananda Dhakal...

WordPress Slideshow Gallery Plugin <= 1.7.8 is vulnerable to SQL Injection

Software Slideshow Gallery Type Plugin Vulnerable versions = 1.7.8 Fixed in 1.7.9 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-31355 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 6b8a2fec8ee3 Credits LVT-tholv2k Required privilege Contributor...

WordPress Slideshow Gallery Plugin <= 1.8 is vulnerable to Sensitive Data Exposure

Software Slideshow Gallery Type Plugin Vulnerable versions = 1.8 Fixed in 1.8.1 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-31353 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0d303a6f8dfd Credits Ananda Dhakal Patchstack...

CVE-2024-1859

The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.8 via deserialization of untrusted input to the awlsliderresponsiveshortcode function. This makes it possible for authenticated...