CVE-2023-5707

CVE-2023-5707 affects the WordPress SEO Slider plugin. Affected versions are all up to and including 1.1.0, where stored XSS is possible via the plugin’s slider shortcode and post meta due to insufficient input sanitization and output escaping (requires authentication level of contributor+). Word...

PT-2023-32434 · WordPress · Video Carousel Slider With Lightbox Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: video carousel slider with lightbox plugin for WordPress version 1.0 Description: The issue is due to missing or incorrect nonce validation on the responsive video gallery with lightbox video management func function, making it possible for...

WordPress SEO Slider Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software SEO Slider Type Plugin Vulnerable versions = 1.1.0 Fixed in 1.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5707 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 17821e38b317 Credits Lana Codes Required privilege...

WordPress Plugin video carousel slider with lightbox Cross-site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Plugin SEO Slider Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin SEO Slider 1.1.0 and...

WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)

Software Layer Slider Type Plugin Vulnerable versions = 1.1.9.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47228 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 580060faeda2 Credits yuyudhn Required privilege...

CVE-2023-5439

The Wp photo text slider 50 plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2023-5439

CVE-2023-5439 affects the WordPress plugin “Wp photo text slider 50” (versions up to and including 8.0). It is an authenticated SQL Injection via the plugin shortcode caused by insufficient escaping in user input and poor query preparation, enabling subscribers+ to append SQL that can extract dat...

CVE-2023-5428 Image vertical reel scroll slideshow <= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. PrestaShop themevolty v.4.0.8 version before the security vulnerability , the vulnerability stems from through...

WordPress Plugin Wp photo text slider SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image zoom and other features. PrestaShop PrestaBlog 4.4.7 version before a security vulnerability , the vulnerability stem...

PT-2023-29535 · Prestashop +1 · Prestablog +1

Name of the Vulnerable Software and Affected Versions: PrestaBlog versions 4.4.7 and earlier Description: The issue allows a guest to perform SQL injection in the PrestaBlog module for PrestaShop. Specifically, the script ajax slider positions.php contains a sensitive SQL call that can be execute...

WordPress Wp anything slider Plugin <= 9.1 is vulnerable to SQL Injection

Software Wp anything slider Type Plugin Vulnerable versions = 9.1 Fixed in 9.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-5466 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 0bc48bf2d3e2 Credits István Márton Required privilege Contributor...

WordPress Wp photo text slider 50 Plugin <= 8.0 is vulnerable to SQL Injection

Software Wp photo text slider 50 Type Plugin Vulnerable versions = 8.0 Fixed in 8.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-5439 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID ab07c07e9de1 Credits István Márton Required privilege Contributor...

WordPress Plugin Carousel, Recent Post Slider and Banner Slider Cross-Site Scripting Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2023-32070 · WordPress · Carousel

Name of the Vulnerable Software and Affected Versions: The Carousel, Recent Post Slider and Banner Slider plugin for WordPress versions up to, and including, 2.0 Description: The issue is related to Stored Cross-Site Scripting via the spice post slider shortcode due to insufficient input...

CVE-2023-5821

The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the deleteselected function. This makes it possible for unauthenticated attackers to delete sliders in bulk via a forged request granted they c...

CVE-2023-5820

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the addedit functionality. This makes it possible for unauthenticated attackers to upload arbitrary files via a forged reques...

CVE-2023-5820

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the addedit functionality. This makes it possible for unauthenticated attackers to upload arbitrary files via a forged reques...