13 matches found
CVE-2026-116398
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Content Slider Block content-slider-block allows Stored XSS.This issue affects Content Slider Block: from n/a through 3.2.1...
CVE-2026-116398
The Content Slider Block plugin for WordPress (versions up to and including 3.2.1 ) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The flaw originates from the improper neutralization of input during web page generation within the content-slider-block component. This could al...
CVE-2026-116398 WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Content Slider Block content-slider-block allows Stored XSS.This issue affects Content Slider Block: from n/a through 3.2.1...
EUVD-2026-110042
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Content Slider Block content-slider-block allows Stored XSS.This issue affects Content Slider Block: from n/a through 3.2.1...
WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Content Slider Block versions = 3.2.1...
EUVD-2024-33234
Malicious code in bioql PyPI...
CVE-2024-10667
The Content Slider Block plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1.5 via the csb shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2024-10667
The Content Slider Block plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1.5 via the csb shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2024-10667
CVE-2024-10667 – Content Slider Block (WordPress) The WordPress plugin Content Slider Block is vulnerable to Information Exposure in all versions up to 3.1.5 via the csb shortcode, allowing authenticated attackers with Contributor-level access and above to extract data from password-protected, pr...
CVE-2024-10667 Content Slider Block – Create fully functional slider with Gutenberg block <= 3.1.5 - Authenticated (Contributor+) Post Disclosure
The Content Slider Block plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1.5 via the csb shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2024-10667: Authorization Bypass Through User-Controlled Key
The Content Slider Block plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1.5 via the csb shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access...
WordPress Content Slider Block plugin <= 3.1.5 - Authenticated (Contributor+) Post Disclosure vulnerability
Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Content Slider Block versions = 3.1.5...
PT-2024-16443 · WordPress · Content Slider Block
Name of the Vulnerable Software and Affected Versions: Content Slider Block plugin for WordPress versions prior to 3.1.6 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from password protected, private, or draft posts via the csb...