CVE-2025-24533

CVE-2025-24533 : WordPress MetaSlider plugin (Responsive Slider) contains a Cross-Site Request Forgery (CSRF) vulnerability affecting versions prior to 3.92.0. The issue, observed in MetaSlider Responsive Slider by MetaSlider, enables CSRF as described in vendor/curation sources. Mitigation is to...

PT-2025-5384 · Unknown · Metaslider Responsive Slider

Name of the Vulnerable Software and Affected Versions: MetaSlider Responsive Slider versions prior to 3.92.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. Recommendations: For versions prior to 3.92.0, update to version 3.92.0 or...

WordPress Responsive jQuery Slider plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Responsive jQuery Slider versions = 1.1.1...

WordPress MetaSlider plugin <= 3.92.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Responsive Slider by MetaSlider versions = 3.92.0...

CVE-2024-37954

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in marcelotorres Simple Responsive Slider allows Reflected XSS.This issue affects Simple Responsive Slider: from n/a through 0.2.2.5...

CVE-2024-37954 WordPress Simple Responsive Slider plugin <= 0.2.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in marcelotorres Simple Responsive Slider allows Reflected XSS.This issue affects Simple Responsive Slider: from n/a through 0.2.2.5...

CVE-2024-37954

CVE-2024-37954 is a reflected XSS in the WordPress plugin Simple Responsive Slider by Marcelotorres. Root cause: improper input neutralization during web page generation. Affected: Simple Responsive Slider for WordPress, from n/a through 0.2.2.5. The connected documents do not provide a confirmed...

PT-2024-27859 · Unknown · Simple Responsive Slider

Name of the Vulnerable Software and Affected Versions: Simple Responsive Slider versions 0.2.2.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: Fo...

WordPress Simple Responsive Slider plugin <= 0.2.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Simple Responsive Slider versions = 0.2.2.5...

WordPress Simple Responsive Slider Plugin <= 0.2.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Simple Responsive Slider Type Plugin Vulnerable versions = 0.2.2.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37954 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fa786425d28d Credits Dimas Maulana Required...

Sangar Slider <= 1.3.2 - Cross-Site Request Forgery

Description The Responsive Slider – Sangar Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to...

WordPress Responsive Slider by MetaSlider Plugin <= 3.70.0 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Slider by MetaSlider Type Plugin Vulnerable versions = 3.70.0 Fixed in 3.70.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3285 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 334dac19f012 Credits wesley...

WordPress Plugin Responsive Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Responsive Slider ...

Creative Image Slider – Responsive Slider Plugin < 2.5.0 - Reflected Cross-Site Scripting

Description The Creative Image Slider – Responsive Slider Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2024-30447

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Solutions Creative Image Slider – Responsive Slider Plugin allows Reflected XSS.This issue affects Creative Image Slider – Responsive Slider Plugin: from n/a through 2.1.3...

CVE-2024-30447

Technical details about CVE-2024-30447 (Creative Image Slider – Responsive Slider Plugin) are not provided in the connected documents. No product version, root cause, impact, or patch information is publicly available here; monitor for official advisories and vendor/user notifications.

PT-2024-23375 · WordPress · Creative Image Slider

Name of the Vulnerable Software and Affected Versions: Creative Image Slider – Responsive Slider Plugin versions n/a through 2.1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Responsive WordPress Slider prio...

CVE-2021-24398

The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is...

CVE-2021-24398

The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is...