4689 matches found
WordPress Meta Slider Plugin <= 3.29.0 is vulnerable to Cross Site Scripting (XSS)
Software Meta Slider Type Plugin Vulnerable versions = 3.29.0 Fixed in 3.29.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 2e34a11fb393 Credits WordFence Required privilege...
CVE-2022-42485
Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...
Cross site scripting
Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...
CVE-2022-42485 WordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...
CVE-2022-42485
CVE-2022-42485 affects the WordPress Gallery with thumbnail slider plugin versions prior to 6.0. The vulnerability is an Auth. (contributor+) stored Cross-Site Scripting (XSS) flaw in the plugin’s handling, enabling XSS by users with contributor or higher permissions. Affected component: Galaxy W...
WordPress GS Testimonial Slider Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)
Software GS Testimonial Slider Type Plugin Vulnerable versions = 1.9.7 Fixed in 1.9.8 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c1ab8700f455 Credits István Márton...
PT-2023-14123 · Unknown · Galaxy Weblinks Gallery With Thumbnail Slider Plugin
Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks Gallery with thumbnail slider plugin versions prior to 6.0 Description: A Cross-Site Scripting XSS issue affects the Galaxy Weblinks Gallery with thumbnail slider plugin, allowing unauthorized access for users with contributor...
WordPress Product Category Slider for WooCommerce Plugin <= 4.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
Software Product Category Slider for WooCommerce Type Plugin Vulnerable versions = 4.1.5 Fixed in 4.1.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e1535456a6d2...
WordPress Product Gallery Slider for WooCommerce Plugin <= 2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software Product Gallery Slider for WooCommerce Type Plugin Vulnerable versions = 2.2.6 Fixed in 2.2.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID eb1cd0b3c2ea...
CVE-2022-47155
Cross-Site Request Forgery CSRF vulnerability in Supsystic Slider by Supsystic plugin = 1.8.5 versions...
CVE-2022-47155
Cross-Site Request Forgery CSRF vulnerability in Supsystic Slider by Supsystic plugin = 1.8.5 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Supsystic Slider by Supsystic plugin = 1.8.5 versions...
CVE-2022-47155 WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Supsystic Slider by Supsystic plugin = 1.8.5 versions...
CVE-2022-47155
The CVE-2022-47155 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Slider by Supsystic plugin
CVE-2022-47155 WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Supsystic Slider by Supsystic plugin = 1.8.5 versions...
WordPress Smart Slider 3 Plugin < 3.5.1.11 Object Injection Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextendweb:smartslider3"; if description...
PT-2023-15199 · Supsystic · Supsystic Slider
Name of the Vulnerable Software and Affected Versions: Supsystic Slider by Supsystic plugin versions = 1.8.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...
WordPress Smart Slider 3 Plugin < 3.5.1.14 is vulnerable to Cross Site Scripting (XSS)
Software Smart Slider 3 Type Plugin Vulnerable versions 3.5.1.14 Fixed in 3.5.1.14 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0660 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 008134aaa2eb Credits Erwan LR WPScan...
WordPress HT Slider For Elementor Plugin < 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software HT Slider For Elementor Type Plugin Vulnerable versions 1.4.0 Fixed in 1.4.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-0495 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID fea57db2be31 Credits Lana Codes...
WordPress YITH WooCommerce Product Slider Carousel Plugin <= 1.16.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software YITH WooCommerce Product Slider Carousel Type Plugin Vulnerable versions = 1.16.0 Fixed in 1.16.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-44630 Patch priority Low CVSS severity Low 4.6 Developer YITH PSID a92ff4b1506a Credits...