Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2026/02/08 1:03 p.m.•20 views

CVE-2026-1613

The Wonka Slide plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's listclass shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.6AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/07 9:16 a.m.•15 views

CVE-2026-1613

The Wonka Slide plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's listclass shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00197EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/07 8:26 a.m.•38 views

CVE-2026-1613 Wonka Slide <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Wonka Slide plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's listclass shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00197EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/07 8:26 a.m.•37 views

CVE-2026-1613

The Wonka Slide plugin for WordPress is affected by a Stored Cross-Site Scripting vulnerability via the plugin's list_class shortcode, impacting versions up to and including 1.3.3. The issue stems from insufficient input sanitization and output escaping on user-supplied attributes, allowing authe...

6.4CVSS5.6AI score0.00197EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/07 8:26 a.m.•7 views

CVE-2026-1613 Wonka Slide <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Wonka Slide plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's listclass shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00197EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/07 8:26 a.m.•14 views

CVE-2026-1613

The Wonka Slide plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's listclass shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.6AI score0.00197EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/07 12:00 a.m.•17 views

WordPress plugin Wonka Slide 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.8AI score0.00197EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/07 12:00 a.m.•21 views

PT-2026-6893

Name of the Vulnerable Software and Affected Versions Wonka Slide versions up to and including 1.3.3 Description The Wonka Slide plugin for WordPress is susceptible to Stored Cross-Site Scripting through the list class shortcode. Insufficient input sanitization and output escaping on user-supplie...

6.4CVSS5.7AI score0.00197EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/07 12:00 a.m.•1 views

CVE-2026-1613: Improper Neutralization of Input During Web Page Generation

The Wonka Slide plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's listclass shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS6AI score0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/02/06 11:29 p.m.•15 views

WordPress Wonka Slide plugin <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Wonka Slide versions = 1.3.3...

6.4CVSS5.3AI score0.00197EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder