CVE-2024-34444-Exploit-Poc

CVE-2024-34444 - Escáner de Autorización Faltante de Slider Revolution Escáner masivo profesional para CVE-2024-34444 que afecta al plugin de WordPress Slider Revolution 6.7.0 Banner 🎯 Descripción CVE-2024-34444 es una vulnerabilidad de Autorización Faltante en el plugin de WordPress Slider...

Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection

The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.This makes ...

WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4. id: CVE-2026-49777 info: name: WordPress Product Slider Pro f...

WordPress Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload

Slider Future WordPress plugin = 1.0.5 contains an unrestricted file upload vulnerability caused by missing file type validation in 'sliderfuturehandleimageupload', letting unauthenticated attackers upload arbitrary files, exploit requires no authentication. id: CVE-2026-1405 info: name: WordPres...

OWL Carousel Slider - Cross-Site Scripting

OWL Carousel Slider WordPress plugin v2.2 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craft malicious URL. id: CVE-2024-13627 info:...

WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection

WordPress WP TripAdvisor Review Slider plugin before 10.8 is susceptible to authenticated SQL injection. The plugin does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber. This can lead...

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...

CVE-2026-49777

CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pro para WooCommerce Backdoor RCE Análisis Técnico en Profundidad: Vulnerabilidad Backdoor de Product Slider Pro Base y Causa de la Vulnerabilidad CWE-1284 El origen técnico de la vulnerabilidad se clasifica como CWE-1284: "Validación...

CVE-2025-2011

CVE-2025-2011 - Depicter Plugin SQL Injection Vulnerability CVE Reference: CVE-2025-2011 This repository contains a proof-of-concept environment for testing the SQL injection vulnerability in Depicter Slider & Popup Builder plugin versions 3.6.2. Prerequisites Docker Docker Compose Python 3.x...

CVE-2014-91371-Wordpress-

CVE-2014-91371-Wordpress Description wordpress with Plugin Slider REvolution 4.1.4...

CVE-2025-10353-POC

CVE-2025-10353 POC - File Upload RCE 🛠️ POC for CVE-2025-10353: A file-upload vulnerability in the melis-cms-slider module of Melis Platform that can lead to remote code execution RCE when an attacker uploads a malicious file via the mcsdetailimg parameter to:...

woocommerce-plugin-supply-chain-security-assessment

CVE-2026-49777 - Implantación de Software Malicioso y RCE en WooCommerce Product Slider Pro Informe de Ciberseguridad Estilo Consultoría Informe profesional de evaluación de vulnerabilidades sobre el riesgo en la cadena de suministro del plugin de WooCommerce, que incluye el impacto empresarial, ...

CVE-2025-2011

PoC de CVE-2025-2011 Por: X3RX3S Pero orgullosamente saqueado por Ash Wesker que usó GPT con mi código y su banner ; ver aquí --- https://github.com/Ashwesker/Blackash-CVE-2025-2011 Incluso puedes ver mi handle en 'su' código --' Propósito: Una herramienta de prueba de concepto para evaluar una...

CVE-2026-94122

Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...

EUVD-2026-89839

Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...

CVE-2026-94122 WordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerability

Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...

CVE-2026-94122 WordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerability

Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...

CVE-2026-94122

The WordPress Responsive Slider Gallery plugin, in versions

CVE-2026-14876

The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-href' parameter in all versions up to, and including, 3.5.1.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

EUVD-2026-89667

The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-href' parameter in all versions up to, and including, 3.5.1.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...