Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:17 a.m.2 views

CVE-2025-14122

The AD Sliding FAQ plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slidingfaq' shortcode in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...

6.4CVSS5AI score0.00008EPSS
Exploits0References1
NVD
NVD
added 2026/01/07 12:16 p.m.1 views

CVE-2025-14122

The AD Sliding FAQ plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slidingfaq' shortcode in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...

6.4CVSS0.00008EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/07 9:21 a.m.21 views

CVE-2025-14122 AD Sliding FAQ <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The AD Sliding FAQ plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slidingfaq' shortcode in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...

6.4CVSS0.00008EPSS
Exploits0References3
CVE
CVE
added 2026/01/07 9:21 a.m.9 views

CVE-2025-14122

CVE-2025-14122 concerns the AD Sliding FAQ plugin for WordPress. The connected Wordfence report confirms a stored XSS vulnerability via the sliding_faq shortcode, affecting all versions up to and including 2.4, caused by insufficient input sanitization and output escaping on user-supplied attribu...

6.4CVSS4.7AI score0.00008EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.2 views

PT-2026-1626

Name of the Vulnerable Software and Affected Versions AD Sliding FAQ plugin for WordPress versions prior to 2.5 Description The software is susceptible to Stored Cross-Site Scripting through the 'sliding faq' shortcode. Insufficient input sanitization and output escaping on user-supplied attribut...

6.4CVSS5.5AI score0.00008EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.1 views

WordPress plugin AD Sliding FAQ 跨站脚本漏洞

...

6.4CVSS6.7AI score0.00008EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/06 11:22 p.m.3 views

WordPress AD Sliding FAQ plugin <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin AD Sliding FAQ versions = 2.4...

6.4CVSS5.6AI score0.00008EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder