WordPress Carousel Slideshow Plugin <= 3.9 - Multiple Vulnerabilities

This plugin is prone to an unspecified vulnerabilities. Solution Update plugin...

XEN Carousel < 0.12.2 - XSS vulnerabilities in xencarousel-admin.js.php via path or ajaxpath parameter

The xen-carousel WordPress plugin was affected by a XSS vulnerabilities in xencarousel-admin.js.php via path or ajaxpath parameter security vulnerability...

WordPress All In One Carousel Plugin <= 1.2.20 - Reflected XSS

This plugin is prone to a reflected cross site scripting vulnerability in /tpl/addcarousel.php id parameter. Solution Update the plugin...

CVE-2014-4602

Multiple cross-site scripting XSS vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 path or 2 ajaxpath parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 path or 2 ajaxpath parameter...

CVE-2014-4516

Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...

CVE-2014-4602

Multiple cross-site scripting XSS vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 path or 2 ajaxpath parameter...

CVE-2014-4516

The CVE-2014-4516 entry affects the WordPress BIC Media Widget plugin (

CVE-2014-4602

The CVE-2014-4602 entry concerns the WordPress XEN Carousel plugin (version 0.12.2 and earlier). The vulnerability is an XSS flaw in the admin asset xencarousel-admin.js.php, exploitable via the path or ajaxpath parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected...

Lc Flickr Carousel 1.0 - Local File Disclosure Vulnerability

No description provided by source. Exploit Title: Lc Flickr Carousel V1.0 = Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://code.google.com/p/lcflickr/downloads/list Version: 1.0 Category:: Local File Disclosure Vulnerability2 Tested on: Xp SP 2 ...

PT-2014-6015

Name of the Vulnerable Software and Affected Versions XEN Carousel plugin versions 0.12.2 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the path or ajaxpath parameters. This can lead to cross-site scripting XSS attacks. Recommendations For XE...

CVE-2014-4602: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 path or 2 ajaxpath parameter...

CVE-2014-4516: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...

PT-2014-5946

Name of the Vulnerable Software and Affected Versions BIC Media Widget plugin version 1.0 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the param parameter in the...

WordPress XEN Carousel Plugin <= 0.12.2 - Multiple XSS

Because of these multiple vulnerabilities in xencarousel-admin.js.php, the attackers can inject arbitrary web script or HTML via the "ajaxpath" or "path" parameter. Solution Update the plugin...

Unite Horizontal Carousel

Unite Horizontal Carousel, , Directory Traversal Updated the extension, fixed the bug, the new version is 1.1 UpdateNoticeURL http://unitecms.net/news...

Flickr Carousel 1.0 File Disclosure

File disclosure vulnerability in Flickr Carousel Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Lc Flickr Carousel 1.0 File Disclosure

Exploit Title: Lc Flickr Carousel V1.0 = Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://code.google.com/p/lcflickr/downloads/list Version: 1.0 Category:: Local File Disclosure Vulnerability2 Tested on: Xp SP 2 Ex : Lc Flickr Carousel...

Lc Flickr Carousel 1.0 - Local File Disclosure

Lc Flickr Carousel 1.0 - Local File Disclosure Exploit Title: Lc Flickr Carousel V1.0 = Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://code.google.com/p/lcflickr/downloads/list Version: 1.0 Category:: Local File Disclosure Vulnerability2 Tested...