Lucene search
+L

24 matches found

Patchstack
Patchstack
•added 2026/06/25 8:30 a.m.•23 views

WordPress Slick Popup plugin <= 1.7.15 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Slick Popup versions = 1.7.15...

6.5CVSS5.8AI score0.00165EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2019-6778

Malware in sbrugna...

8.8CVSS7.8AI score0.02071EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-50990

Malicious code in bioql PyPI...

4.8CVSS5.2AI score0.00336EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:43 a.m.•16 views

CVE-2023-46824

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Om Ak Solutions Slick Popup: Contact Form 7 Popup Plugin plugin = 1.7.14 versions...

5.9CVSS5.1AI score0.00336EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:27 a.m.•17 views

CVE-2019-15867

The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13 password for the slickpopupteam account, after a Subscriber calls a certain AJAX action...

8.8CVSS7.2AI score0.02071EPSS
SaveExploits2References1
OSV
OSV
•added 2023/11/06 10:15 a.m.•16 views

CVE-2023-46824

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Om Ak Solutions Slick Popup: Contact Form 7 Popup Plugin plugin = 1.7.14 versions...

4.8CVSS5.8AI score0.00336EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/11/06 10:15 a.m.•13 views

CVE-2023-46824

A vulnerability in Ankit Singla Slick Popup slick-popup.This issue affects Slick Popup: from n/a through = 1.7.14...

5.9CVSS5.1AI score0.00336EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/11/06 9:43 a.m.•14 views

CVE-2023-46824 WordPress Slick Popup Plugin <= 1.7.14 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Om Ak Solutions Slick Popup: Contact Form 7 Popup Plugin plugin = 1.7.14 versions...

5.9CVSS5.6AI score0.00336EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/06 9:43 a.m.•115 views

CVE-2023-46824

Slick Popup: Contact Form 7 Popup Plugin for WordPress (plugin

5.9CVSS4.8AI score0.00336EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/06 12:00 a.m.•6 views

CVE-2023-46824: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Om Ak Solutions Slick Popup: Contact Form 7 Popup Plugin plugin = 1.7.14 versions...

5.9CVSS5.6AI score0.00336EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/11/06 12:00 a.m.•17 views

WordPress Plugin Slick Popup: Contact Form 7 Popup Plugin Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Slick Popup: Contact Form 7 Popup Plugi...

4.8CVSS6.1AI score0.00336EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/10/30 12:00 a.m.•19 views

WordPress Slick Popup Plugin <= 1.7.14 is vulnerable to Cross Site Scripting (XSS)

Software Slick Popup Type Plugin Vulnerable versions = 1.7.14 Fixed in 1.7.15 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-46824 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 6bfc0d7608aa Credits Huynh Tien Si Required privilege...

4.8CVSS6.6AI score0.00336EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2019/09/05 12:00 a.m.•22 views

WordPress slick-popup plugin trust management issue vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. slick-popup is a window popup plugin used in it. A trust management issue vulnerability exists in WordPress slick-popup plugin version...

8.8CVSS6.7AI score0.02071EPSS
SaveExploits2References1
NVD
NVD
•added 2019/09/03 12:15 p.m.•28 views

CVE-2019-15867

The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13 password for the slickpopupteam account, after a Subscriber calls a certain AJAX action...

8.8CVSS8.9AI score0.02071EPSS
SaveExploits2References3
OSV
OSV
•added 2019/09/03 12:15 p.m.•17 views

CVE-2019-15867

The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13 password for the slickpopupteam account, after a Subscriber calls a certain AJAX action...

8.8CVSS5.8AI score0.02071EPSS
SaveExploits2References3
Prion
Prion
•added 2019/09/03 12:15 p.m.•24 views

Hardcoded credentials

The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13 password for the slickpopupteam account, after a Subscriber calls a certain AJAX action...

6.5CVSS8.8AI score0.02071EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2019/09/03 11:53 a.m.•80 views

CVE-2019-15867

The CVE-2019-15867 issue affects the WordPress slick-popup plugin (pre-1.7.2). It relies on a hardcoded credential OmakPass13# for the slickpopupteam account, enabling privilege escalation via a specific AJAX action (as described by connected sources). Practical impact is administrator-level acce...

8.8CVSS8.7AI score0.02071EPSS
SaveExploits2References3Affected Software1
Mend
Mend
•added 2019/09/03 11:53 a.m.•6 views

CVE-2019-15867

The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13 password for the slickpopupteam account, after a Subscriber calls a certain AJAX action...

8.8CVSS0.02071EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/03 12:00 a.m.•10 views

CVE-2019-15867: Use of Hard-coded Credentials

The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13 password for the slickpopupteam account, after a Subscriber calls a certain AJAX action...

8.8CVSS7.7AI score0.02071EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2019/09/03 12:00 a.m.•5 views

PT-2019-14446

Name of the Vulnerable Software and Affected Versions slick-popup plugin versions prior to 1.7.2 Description The issue concerns a hardcoded password, specifically OmakPass13, for the slickpopupteam account in the slick-popup plugin. This password can be accessed after a Subscriber initiates a...

8.8CVSS0.02071EPSS
SaveExploits2References5
Rows per page
Query Builder