CVE-2021-46889

The CVE-2021-46889 entry concerns the WordPress Photo Gallery by 10Web plugin prior to version 1.5.69, which is vulnerable to cross-site scripting via the theme_id parameter in the bwg_frontend_data AJAX action. The linked technical detail (CVE-2021-24291) confirms multiple reflected XSS vectors ...

CVE-2015-10109

A vulnerability was found in Video Playlist and Gallery Plugin up to 1.136 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality of the file wp-media-cincopa.php. The manipulation leads to cross-site request forgery. The attack may be launched...

CVE-2015-10109

CVE-2015-10109 affects the Video Playlist and Gallery Plugin for WordPress up to version 1.136, where the file wp-media-cincopa.php is implicated in a cross-site request forgery (CSRF). The vulnerability enables CSRF via an unknown functionality in that file, with remote exploitation possible. Th...

WordPress plugin Video Playlist and Gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Video Playlist and...

PT-2023-10288 · WordPress · Video Playlist/Gallery Plugin

Name of the Vulnerable Software and Affected Versions: Video Playlist and Gallery Plugin versions up to 1.136 Description: A problem was found in the Video Playlist and Gallery Plugin. It affects some unknown functionality of the file wp-media-cincopa.php. The issue leads to cross-site request...

WordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)

Software Unite Gallery Lite Type Plugin Vulnerable versions = 1.7.61 Fixed in 1.7.62 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-34183 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a4816cf27480 Credits yuyudhn Required...

CVE-2022-45372

Cross-Site Request Forgery CSRF vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin = 2.2.8 versions...

CVE-2022-45372

Cross-Site Request Forgery CSRF vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin = 2.2.8 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin = 2.2.8 versions...

CVE-2022-45372

CVE-2022-45372 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Codeixer Product Gallery Slider for WooCommerce plugin for WordPress, affecting versions up to 2.2.8. The issue arises from CSRF in the plugin, enabling unauthorized actions within an authenticated session. Public r...

CVE-2022-45372 WordPress Product Gallery Slider for WooCommerce Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin = 2.2.8 versions...

CVE-2022-45372 WordPress Product Gallery Slider for WooCommerce Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin = 2.2.8 versions...

PT-2023-14659 · Woocommerce · Codeixer Product Gallery Slider For Woocommerce

Name of the Vulnerable Software and Affected Versions: Codeixer Product Gallery Slider for WooCommerce plugin versions = 2.2.8 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application...

WordPress Plugin Product Gallery Slider for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2014-125101

A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...

Sql injection

A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...

CVE-2014-125101

The CVE-2014-125101 entry concerns the Portfolio Gallery Plugin for WordPress, affected versions up to 1.1.8. A SQL injection vulnerability exists in an unspecified component/part, which can be exploited remotely. Remediation is to upgrade to version 1.1.9, with patch identifier 58ed88243e17df766...

CVE-2014-125101 Portfolio Gallery Plugin sql injection

A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...

WordPress plugin Portfolio Gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2023-10169 · WordPress · Portfolio Gallery Plugin

Name of the Vulnerable Software and Affected Versions: Portfolio Gallery Plugin versions up to 1.1.8 Description: A critical vulnerability has been found in the Portfolio Gallery Plugin on WordPress, affecting an unknown part. The manipulation leads to sql injection and can be initiated remotely...