WordPress Kings Tab Slider Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Kings Tab Slider Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51932 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ec837d97ef11 Credits SOPROBRO Required privilege Contributor...

PT-2024-16443 · WordPress · Content Slider Block

Name of the Vulnerable Software and Affected Versions: Content Slider Block plugin for WordPress versions prior to 3.1.6 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from password protected, private, or draft posts via the csb...

CVE-2024-8442

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Blog widget in all versions up to, and including, 3.15.18 due to insufficient input sanitization and output escaping on...

WordPress Prime Slider - Addons For Elementor plugin <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget vulnerability

WordPress Prime Slider - Addons For Elementor plugin = 3.15.18 - Authenticated Contributor+ Stored Cross-Site Scripting via Blog Widget vulnerability discovered by Robert DeVore in WordPress Plugin Prime Slider – Addons For Elementor versions = 3.15.18...

PT-2024-39016 · WordPress · The Prime Slider – Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Prime Slider – Addons For Elementor plugin for WordPress versions up to, and including, 3.15.18 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Blog widget due to insufficient input sanitization and outpu...

WordPress plugin Prime Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress Team Showcase and Slider plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Team Showcase and Slider – Team Members Builder versions = 1.3...

WordPress Team Showcase and Slider – Team Members Builder Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Team Showcase and Slider – Team Members Builder Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51763 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 901482778662 Credits Mika...

CVE-2024-47359

Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Depicter Slider: from n/a through 3.2.2...

CVE-2024-47359

Cross-Site Request Forgery CSRF vulnerability in averta Depicter Slider depicter.This issue affects Depicter Slider: from n/a through = 3.2.2...

CVE-2024-43215

Missing Authorization vulnerability in creativemotion Social Slider Feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Slider Feed: from n/a through 2.2.2...

CVE-2024-43215

Missing Authorization vulnerability in creativemotion Social Slider Feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Slider Feed: from n/a through 2.2.2...

CVE-2024-43215 WordPress Social Slider Feed plugin <= 2.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in creativemotion Social Slider Feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Slider Feed: from n/a through 2.2.2...

CVE-2024-43215 WordPress Social Slider Feed plugin <= 2.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in creativemotion Social Slider Feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Slider Feed: from n/a through 2.2.2...

CVE-2024-43215

CVE-2024-43215 corresponds to a Missing Authorization vulnerability in Creativemotion Social Slider Feed for WordPress. Technical detail in connected PT-2024-30378 shows that versions through 2.2.2 are affected by broken access control enabling exploitation via misconfigured authorization. The re...

CVE-2024-47359

CVE-2024-47359 affects the WordPress plugin Depicter Slider (Slider & Popup Builder) versions ≤ 3.2.2. The issue is a Broken Access Control (Missing Authorization) vulnerability. A fix is available in version 3.5.0 . Patchstack assigns a low severity (CVSS v3.1 5.3) and indicates low exploitabili...

WordPress plugin Depicter Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-30378 · Unknown · Creativemotion Social Slider Feed

Name of the Vulnerable Software and Affected Versions: creativemotion Social Slider Feed versions through 2.2.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

WordPress plugin Social Slider Feed 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-49635

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in manjurul.cis Banner Slider banner-slider allows Reflected XSS.This issue affects Banner Slider: from n/a through = 2.1...