CVE-2024-35717 WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow: from n/a through 1.3.9...

CVE-2024-35717 WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow: from n/a through 1.3.9...

CVE-2024-35717

No technical details about CVE-2024-35717 are present in the provided Connected documents. Public specifics (affected version range, impact, and mitigation) are not disclosed here. Monitor official advisories for precise exploitation vectors and fixes.

CVE-2024-35722

Technical details about CVE-2024-35722 are not publicly available in the provided documents. No affected product/version is specified here. Monitor for official advisories and updates from vendors or CVE databases.

CVE-2024-35722 WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...

CVE-2024-35722 WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...

WordPress plugin Media Slider security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-26667 · WordPress · A Wp Life Media Slider

Name of the Vulnerable Software and Affected Versions: A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow versions 1.3.9 and earlier Description: The issue is related to a Missing Authorization vulnerability in the A WP Life Media Slider plugin. This vulnerabilit...

WordPress plugin Slider Responsive Slideshow Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

CVE-2024-5091

The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Age Gate and Creative Slider widgets in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-5091

The vulnerability CVE-2024-5091 affects the SKT Addons for Elementor WordPress plugin. It allows Stored Cross-Site Scripting via the Age Gate and Creative Slider widgets in all versions up to and including 2.0. The issue arises from insufficient input sanitization and output escaping on user-supp...

WordPress plugin SKT Addons for Elementor security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-34452 · WordPress · Skt Addons For Elementor

Name of the Vulnerable Software and Affected Versions: SKT Addons for Elementor plugin for WordPress versions up to, and including, 2.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Age Gate and Creative Slider widgets due to insufficient input sanitization and...

CVE-2024-3288

The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-3288

CVE-2024-3288 affects the Logo Slider WordPress plugin (pre-4.0.0). The issue is that certain Slider Settings are not properly validated or escaped before being output in attributes, enabling Stored XSS for users with Contributor+ roles. Red Hat confirms the same description. Remediation per sour...

CVE-2024-3288 Logo Slider < 4.0.0 - Contributor+ Stored XSS

The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-5640

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficient input sanitization and...

CVE-2024-5640

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficient input sanitization and...

CVE-2024-5640 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficient input sanitization and...

WordPress Prime Slider plugin <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Pacific Widget vulnerability discovered by wesley wcraft in WordPress Plugin Prime Slider – Addons For Elementor versions = 3.14.7...