WordPress Carousel, Slider, Gallery by WP Carousel Plugin <= 2.6.3 is vulnerable to PHP Object Injection

Software Carousel, Slider, Gallery by WP Carousel Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-3020 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID 83a2e39ed352 Credits hoanpk Required...

Slideshow Gallery < 1.7.9 - Settings Reset via CSRF

Description The plugin does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

CVE-2024-31355

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31355 WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31355

CVE-2024-31355 is an authenticated SQL injection vulnerability in the Tribulant Slideshow Gallery plugin for WordPress, affecting Slideshow Gallery LITE up to version 1.7.8. An attacker with at least Contributor+ privileges can exploit the flaw to manipulate the SQL query, potentially impacting c...

CVE-2024-31355 WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31353

Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31353

Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31342 WordPress Gallery Exporter plugin <= 1.3 - Arbitrary File Download vulnerability

Missing Authorization vulnerability in WPcloudgallery WordPress Gallery Exporter.This issue affects WordPress Gallery Exporter: from n/a through 1.3...

CVE-2024-31342

CVE-2024-31342 is a Missing Authorization vulnerability for the WordPress plugin WordPress Gallery Exporter (also referred to as WPcloudgallery WP Gallery Exporter), with affected versions listed as from n/a through 1.3. The Red Hat entry and Patchstack reference confirm the issue is tied to Word...

CVE-2024-31353 WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31353 WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8...

CVE-2024-31353

CVE-2024-31353 : Affects Slideshow Gallery LITE (WordPress plugin) ≤ 1.7.8. The Wordfence entry confirms an unauthenticated information exposure vulnerability (insertion of sensitive information into log files). No exploitation details are provided in the connected docs, and the patch status for ...

CVE-2024-3235

CVE-2024-3235 affects the Essential Grid Gallery WordPress Plugin (WordPress plugin name: Essential Grid) with a Sensitive Information Exposure in the on_front_ajax_action() path. All versions up to 3.1.1 are vulnerable, allowing unauthenticated attackers to view private and password-protected po...

PT-2024-23985 · WordPress · Wordpress Gallery Exporter

Name of the Vulnerable Software and Affected Versions: WordPress Gallery Exporter versions 1.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in the WPcloudgallery WordPress Gallery Exporter. This vulnerability affects the WordPress Gallery Exporter plugin...

WordPress Gallery Exporter <= 1.3 - Authenticated (Administrator+) Arbitrary File Download

Description The WordPress Gallery Exporter – Export your NextGen, Envira and FooGallery galleries to your computer plugin for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 1.3. This is due to the plugin improperly validating the path to requested file...

WordPress Plugin Slideshow Gallery LITE SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Slideshow Gallery...

WordPress Plugin WordPress Gallery Exporter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Plugin Slideshow Gallery LITE 日志信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Slideshow Gallery LITE A l...

PT-2024-24526 · WordPress · Essential Grid Gallery

Name of the Vulnerable Software and Affected Versions: The Essential Grid Gallery WordPress Plugin versions up to, and including, 3.1.1 Description: The issue allows unauthenticated attackers to view private and password-protected posts that may contain sensitive information. This is possible due...