Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•9 views

CVE-2025-31569: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wp-buy wordpress related Posts with thumbnails related-posts-list-grid-and-slider-all-in-one allows Stored XSS.This issue affects wordpress related Posts with thumbnails: from n/a through = 3.0.0.1...

7.1CVSS5.8AI score0.00143EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/02/06 8:15 p.m.•16 views

CVE-2022-4747

The Post Category Image With Grid and Slider WordPress plugin before 1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be...

5.4CVSS5.8AI score0.00685EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•7 views

PT-2023-15348

Name of the Vulnerable Software and Affected Versions The Post Category Image With Grid and Slider WordPress plugin versions prior to 1.4.8 Description The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privile...

5.4CVSS0.00685EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•5 views

CVE-2022-4747: Undefined Security Weakness

The Post Category Image With Grid and Slider WordPress plugin before 1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be...

5.4CVSS5.9AI score0.00685EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2023/02/06 12:00 a.m.•20 views

WordPress plugin Post Category Image With Grid and Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS5.4AI score0.00685EPSS
SaveExploits2References2
Patchstack
Patchstack
•added 2023/01/04 12:00 a.m.•9 views

WordPress Post Category Image With Grid and Slider Plugin <= 1.4.7 is vulnerable to Cross Site Scripting (XSS)

Software Post Category Image With Grid and Slider Type Plugin Vulnerable versions = 1.4.7 Fixed in 1.4.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Medium CVSS severity Medium 6.4 Developer Claim ownership PSID ff6be2f18b61 Credits N/A...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder