WordPress Carousel Slideshow Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Levo Slideshow Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Flip Slideshow Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Levo-Slideshow 2.3 Shell Upload

Document Title: =============== Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1854 Release Date: ============= 2016-06-07 Vulnerability Laboratory ID VL-ID:...

WordPress Levo-Slideshow 2.3 Cross Site Scripting

Document Title: =============== Wordpress Levo-Slideshow v2.3 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1855 Release Date: ============= 2016-06-06 Vulnerability Laboratory ID VL-ID: ====================================...

Wordpress Levo-Slideshow - Arbitrary File Upload

The wp-levoslideshow WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Wordpress Levo-Slideshow 2.3 - Stored Cross-Site Scripting (XSS)

The wp-levoslideshow WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload

Document Title: =============== Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1854 Release Date: ============= 2016-06-07 Vulnerability Laboratory ID VL-ID: ==================================== 1854...

Wordpress Levo-Slideshow v2.3 - Persistent Vulnerability

Document Title: =============== Wordpress Levo-Slideshow v2.3 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1855 Release Date: ============= 2016-06-06 Vulnerability Laboratory ID VL-ID: ====================================...

Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload

Document Title: =============== Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1854 Release Date: ============= 2016-06-06 Vulnerability Laboratory ID VL-ID: ==================================== 1854...

WordPress Levo-Slideshow 2.3 Shell Upload

Exploit Name: Wordpress Levo-Slideshow 2.3 Shell Upload by Unprivileged user Exploit Date: 5/6/2016 Author: Aaditya Purani Author Blog: https://aadityapurani.com Vendor: https://wordpress.org/plugins/wp-levoslideshow Version: 2.3 Tested on: Wordpress 4.5.2 Hi This is Aaditya Purani, Let's have lo...

Wordpress Levo-Slideshow v2.3 - Persistent Vulnerability

Document Title: =============== Wordpress Levo-Slideshow v2.3 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1855 Release Date: ============= 2016-06-05 Vulnerability Laboratory ID VL-ID: ====================================...

WordPress Fluid Responsive Slideshow Plugin <= 2.2.6 - Multiple Vulnerabilities

This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. The CSRF bug can lead to a server-side compromise. Solution Update the plugin...

Free Slideshow Maker - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Free Slideshow Maker published at the 'play' market has multiple vulnerabilities...

Photo2Video:Photo Slideshow - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Photo2Video:Photo Slideshow published at the 'play' market has multiple vulnerabilities...

Pixgram -music photo slideshow - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Pixgram -music photo slideshow published at the 'play' market has multiple vulnerabilities...

Slideshow Maker - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Slideshow Maker published at the 'play' market has multiple vulnerabilities...

MiniMovie-Slideshow Video Edit - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MiniMovie-Slideshow Video Edit published at the 'play' market has multiple vulnerabilities...

Uber: CSRF on eng.uber.com may lead to server-side compromise

The site eng.uber.com uses a WordPress plugin called Fluid Responsive Slideshow. The plugin doesn't implement any CSRF check for AJAX requests. Some of these AJAX requests can be used to modify posts and pages on the system. An attacker could use this bug to inject arbitrary JavaScript in any pag...

WordPress Slideshow Plugin <= 2.1.14 - Multiple Script Insertion Vulnerabilities

This plugin is prone to multiple script insertion vulnerabilities. Attackers can conduct script insertion attacks. Solution Update plugin...