Lucene search
+L

1235 matches found

CNNVD
CNNVD
added 2024/12/12 12:0 a.m.4 views

WordPress plugin Product Carousel Slider & Grid Ultimate for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress plugin...

8.8CVSS8.6AI score0.00794EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/09 1:15 p.m.7 views

CVE-2023-25703

Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Meta slider and carousel with lightbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta slider and carousel with lightbox: from n/a through 1.6.2...

5.3CVSS0.00528EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 11:31 a.m.37 views

CVE-2023-25703

CVE-2023-25703 relates to the WordPress Meta Slider and Carousel with Lightbox plugin (versions ≤ 1.6.2). The root cause is Broken Access Control / Missing Authorization, allowing unauthenticated exploitation as described in connected sources. The vulnerability affects the plugin’s access control...

5.3CVSS8.6AI score0.00528EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.6 views

WordPress plugin Meta slider and carousel with lightbox 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.7AI score0.00528EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/06 12:0 a.m.6 views

WordPress plugin Slider and Carousel slider by Depicter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.4CVSS7.8AI score0.00424EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/12/03 11:52 p.m.8 views

WordPress Carousel, Slider, Gallery by WP Carousel plugin <= 2.6.8 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Carousel, Slider, Gallery by WP Carousel versions = 2.6.8...

6.4CVSS6.1AI score0.00421EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/01 9:21 p.m.34 views

CVE-2024-53749 WordPress Post Carousel Slider for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Stored XSS.This issue affects Post Carousel Slider for Elementor: from n/a through = 1.5.0...

6.5CVSS0.00229EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/01 9:21 p.m.54 views

CVE-2024-53749

CVE-2024-53749 affects the WordPress plugin Post Carousel Slider for Elementor (versions up to 1.4.0). The issue is a Stored Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation. Impact is stored XSS, allowing injected scripts to execute in the victim’s br...

6.5CVSS7.2AI score0.00229EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/01 12:0 a.m.7 views

WordPress plugin Post Carousel Slider for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS7.9AI score0.00229EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/01 12:0 a.m.7 views

PT-2024-35858 · Elementor · Plugin Devs Post Carousel Slider For Elementor

Name of the Vulnerable Software and Affected Versions: Plugin Devs Post Carousel Slider for Elementor versions 1.4.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an...

6.5CVSS8.8AI score0.00229EPSS
SaveExploits0References5
NVD
NVD
added 2024/11/30 10:15 p.m.17 views

CVE-2024-53756

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aftab Husain Vertical Carousel vertical-carousel-slider allows Stored XSS.This issue affects Vertical Carousel: from n/a through = 1.0.2...

6.5CVSS0.00283EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/30 9:57 p.m.8 views

CVE-2024-53756 WordPress Vertical Carousel plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aftab Husain Vertical Carousel allows Stored XSS.This issue affects Vertical Carousel: from n/a through 1.0.2...

6.5CVSS6.8AI score0.00283EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/30 9:57 p.m.47 views

CVE-2024-53756

CVE-2024-53756 concerns the WordPress plugin Vertical Carousel (versions

6.5CVSS7.2AI score0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/30 9:57 p.m.26 views

CVE-2024-53756 WordPress Vertical Carousel plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aftab Husain Vertical Carousel vertical-carousel-slider allows Stored XSS.This issue affects Vertical Carousel: from n/a through = 1.0.2...

6.5CVSS0.00283EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/30 12:0 a.m.4 views

WordPress plugin Vertical Carousel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS8AI score0.00283EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/30 12:0 a.m.4 views

PT-2024-35866 · Unknown · Aftab Husain Vertical Carousel

Name of the Vulnerable Software and Affected Versions: Aftab Husain Vertical Carousel versions 1.0.2 and earlier Description: The issue affects Aftab Husain Vertical Carousel, allowing Stored XSS due to improper neutralization of input during web page generation. This is a Cross-site Scripting...

6.5CVSS8.8AI score0.00283EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2024/11/28 12:44 p.m.4 views

WordPress Vertical Carousel plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Vertical Carousel versions = 1.0.2...

6.5CVSS6.1AI score0.00283EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/28 12:2 p.m.8 views

WordPress Post Carousel Slider for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Post Carousel Slider for Elementor versions = 1.5.0...

6.5CVSS6.1AI score0.00229EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/11/19 5:15 p.m.16 views

CVE-2024-51842

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sazzad Image Carousel Shortcode image-carousel-shortcode allows DOM-Based XSS.This issue affects Image Carousel Shortcode: from n/a through = 1.2...

6.5CVSS0.00374EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/19 5:15 p.m.7 views

CVE-2024-51821

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordpresteem WE – Client Logo Carousel we-client-logo-carousel allows Stored XSS.This issue affects WE – Client Logo Carousel: from n/a through = 1.4...

6.5CVSS0.00374EPSS
SaveExploits0References1
Rows per page
Query Builder