Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:39 p.m.5 views

CVE-2026-7636

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via the mapmetacap. This makes it possible for authenticated attackers, with subscriber-level access and above, to extra...

4.3CVSS5.4AI score0.00037EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/22 7:50 a.m.24 views

CVE-2026-7636 Slider by Soliloquy <= 2.8.1 - Authenticated (Subscriber+) Information Disclosure via REST API Endpoint

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via the mapmetacap. This makes it possible for authenticated attackers, with subscriber-level access and above, to extra...

4.3CVSS0.00037EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/05/22 12:0 a.m.8 views

PT-2026-42734

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via the map meta cap. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

4.3CVSS5.8AI score0.00037EPSS
Exploits0References9
CNNVD
CNNVD
added 2026/05/22 12:0 a.m.5 views

WordPress plugin Slider by Soliloquy 信息泄露漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

4.3CVSS5.8AI score0.00037EPSS
Exploits0References8
NVD
NVD
added 2026/05/10 1:16 p.m.5 views

CVE-2021-47922

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of...

6.4CVSS0.00039EPSS
Exploits0References4
CVE
CVE
added 2026/05/10 12:43 p.m.9 views

CVE-2021-47922

The CVE concerns the WordPress plugin Slider by Soliloquy version 2.6.2, which is reported to contain a stored cross-site scripting (XSS) vulnerability. The vulnerability occurs in the title parameter when creating or editing sliders, allowing an authenticated attacker to inject JavaScript that c...

6.4CVSS5.7AI score0.00039EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/10 12:43 p.m.9 views

CVE-2021-47922 WordPress Plugin Slider by Soliloquy 2.6.2 Stored XSS

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of...

6.4CVSS5.7AI score0.00039EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/10 12:43 p.m.31 views

CVE-2021-47922 WordPress Plugin Slider by Soliloquy 2.6.2 Stored XSS

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of...

6.4CVSS0.00039EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/10 12:43 p.m.5 views

CVE-2021-47922

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of...

6.4CVSS5.7AI score0.00039EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/10 12:0 a.m.8 views

PT-2026-39498

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of...

6.4CVSS5.7AI score0.00039EPSS
Exploits0References5
Patchstack
Patchstack
added 2024/08/07 11:40 a.m.1 views

WordPress Slider by Soliloquy plugin <= 2.7.6 - Broken Access Control to XSS vulnerability

Broken Access Control to XSS vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Slider by Soliloquy versions = 2.7.6...

5.9CVSS6.4AI score0.002EPSS
Exploits0Affected Software1
OSV
OSV
added 2024/06/11 4:15 p.m.1 views

CVE-2023-51519

Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2...

4.3CVSS5.8AI score0.00162EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/11 3:50 p.m.18 views

CVE-2023-51519 WordPress Slider by Soliloquy – Responsive Image Slider for WordPress plugin <= 2.7.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2...

4.3CVSS6.9AI score0.00162EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/06/11 12:0 a.m.3 views

PT-2024-14173 · Soliloquy · Slider

Name of the Vulnerable Software and Affected Versions: Slider by Soliloquy versions 2.7.2 and earlier Description: The issue is related to a Missing Authorization vulnerability. This means that there is a lack of proper authorization checks, potentially allowing unauthorized access or actions...

4.3CVSS9.3AI score0.00162EPSS
Exploits0References4
Rows per page
Query Builder