CVE-2023-5531

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the delete functionality. This makes it possible for unauthenticated attackers to delete image...

Cross site request forgery (csrf)

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the delete functionality. This makes it possible for unauthenticated attackers to delete image...

CVE-2023-5531

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the delete functionality. This makes it possible for unauthenticated attackers to delete image...

WordPress Thumbnail Slider With Lightbox Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Thumbnail Slider With Lightbox Type Plugin Vulnerable versions = 1.0 Fixed in 1.0.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-5531 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID fe76aeae2c6a Credits Ala...

CVE-2022-42485

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...

Cross site scripting

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...

CVE-2022-42485

CVE-2022-42485 affects the WordPress Gallery with thumbnail slider plugin versions prior to 6.0. The vulnerability is an Auth. (contributor+) stored Cross-Site Scripting (XSS) flaw in the plugin’s handling, enabling XSS by users with contributor or higher permissions. Affected component: Galaxy W...

CVE-2022-42485 WordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...

PT-2023-14123 · Unknown · Galaxy Weblinks Gallery With Thumbnail Slider Plugin

Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks Gallery with thumbnail slider plugin versions prior to 6.0 Description: A Cross-Site Scripting XSS issue affects the Galaxy Weblinks Gallery with thumbnail slider plugin, allowing unauthorized access for users with contributor...

WordPress Plugin Responsive Thumbnail Slider Arbitrary File Upload Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in the WordPress plugin Responsive Thumbnail Slider, which can be exploited by ...

WordPress Plugin Responsive Thumbnail Slider - Arbitrary File Upload (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "WordPress Responsive Thumbnail Slider Arbitrary File Upload", 'Description' = %q This module exploits an arbitrary file upload vulnerability in...

WordPress Responsive Thumbnail Slider Plugin - Arbitrary File Upload Exploit

Exploit for php platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "WordPress Responsive Thumbnail Slider Arbitrary File Upload", 'Description' = %q This module...

WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload

WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link:...

WordPress Responsive Thumbnail Slider Plugin 1.0 - XSS / Arbitrary File Upload Vulnerabilities

Exploit for php platform in category web applications " name="thumbnails" " style="width:50px" height="50px"/ input type="checkbox" val...

WordPress Responsive Thumbnail Slider Arbitrary File Upload

This module exploits an arbitrary file upload vulnerability in Responsive Thumbnail Slider Plugin v1.0 for WordPress post authentication. Module Options msf use exploit/multi/http/wp/responsivethumbnailsliderupload msf undefinedresponsivethumbnailsliderupload show actions ...actions... msf...

WordPress Responsive Thumbnail Slider 1.0 Shell Upload

POC : For Exploiting This Vulnerability : Go To Add Image Section And Upload File By Self Plugin Uploader Then Upload File With Double Extension Image And By Using A BurpSuite Or Tamper Data Change The File Name From Shell.php.jpg To Shell.php And Shell Is Uploaded . :...

WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload

Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link: https://downloads.wordpress.org/plugin/wp-responsive-thumbnail-slider.zip Version:...