WordPress Smart Slider 3 plugin <= 3.5.1.9 - Auth. PHP Object Injection vulnerability

Auth. PHP Object Injection vulnerability discovered by Dave Jong Patchstack in WordPress Smart Slider 3 plugin versions = 3.5.1.9. Solution Update the WordPress Smart Slider 3 plugin to the latest available version at least 3.5.1.11...

CVE-2022-45375

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in iFeature Slider plugin = 1.2 on WordPress...

CVE-2022-45375

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in iFeature Slider plugin = 1.2 on WordPress...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in iFeature Slider plugin = 1.2 on WordPress...

CVE-2022-45375 WordPress iFeature Slider plugin <= 1.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in iFeature Slider plugin = 1.2 on WordPress...

CVE-2022-45375

The CVE-2022-45375 entry concerns WordPress iFeature Slider plugin ≤ 1.2, with an Auth. (contributor+) Stored Cross‑Site Scripting (XSS) vulnerability. The root cause is inadequate sanitisation/escaping of input parameters by the plugin, enabling a user with Contributor+ role to inject scripts th...

CVE-2022-45375

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in iFeature Slider plugin = 1.2 on WordPress...

PT-2022-27479 · Unknown · Ifeature Slider

Name of the Vulnerable Software and Affected Versions: iFeature Slider plugin version 1.2 and earlier Description: A Stored Cross-Site Scripting XSS issue exists, allowing contributors or higher to inject malicious scripts. Recommendations: For iFeature Slider plugin version 1.2 and earlier, upda...

WordPress plugin iFeature Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress iFeature Slider plugin <= 1.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in the WordPress iFeature Slider plugin versions = 1.2. Solution No patched version is available. No reply from the author...

WordPress David Anderson Testimonial Slider Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2022-44741

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

CVE-2022-44741

CVE-2022-44741 affects the WordPress plugin David Anderson Testimonial Slider

CVE-2022-44741 WordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

PT-2022-27293 · WordPress · David Anderson Testimonial Slider

Name of the Vulnerable Software and Affected Versions: David Anderson Testimonial Slider plugin version 1.3.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that can lead to Cross-Site Scripting XSS. Recommendations: For David Anderson Testimonial...

CVE-2022-44741

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

Testimonial Slider <= 1.3.1 - Stored XSS via CSRF

The plugin does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by ptsfence Patchstack Alliance in WordPress Testimonial Slider plugin versions = 1.3.1. Solution No patched version is available. No reply from the vendor...

CVE-2022-3357

The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import intentionally or not a malicious file, and a suitable gadget chain is present on the site...