CVE-2022-29438

Authenticated author or higher user role Persistent Cross-Site Scripting XSS vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress...

CVE-2022-29439

Cross-Site Request Forgery CSRF vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress allows deleting slides...

CVE-2022-29440

Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in Promotion Slider plugin = 3.3.4 at WordPress...

CVE-2022-29437

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Image Slider by NextCode plugin = 1.1.2 at WordPress...

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Image Slider by NextCode plugin = 1.1.2 at WordPress...

Cross site scripting

Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in Promotion Slider plugin = 3.3.4 at WordPress...

Cross site scripting

Authenticated author or higher user role Persistent Cross-Site Scripting XSS vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress allows deleting slides...

CVE-2022-29440

The CVE-2022-29440 entry concerns the WordPress Promotion Slider plugin versions 3.3.4 and earlier, where multiple authenticated users with contributor or higher roles can trigger stored XSS in the plugin’s UI. The vulnerability is tied to a cross-site scripting flaw that can be exploited by logg...

CVE-2022-29440 WordPress Promotion Slider plugin <= 3.3.4 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in Promotion Slider plugin = 3.3.4 at WordPress...

CVE-2022-29439

CVE-2022-29439 : WordPress Image Slider by NextCode plugin

CVE-2022-29439 WordPress Image Slider by NextCode plugin <= 1.1.2 - Slider Deletion via Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress allows deleting slides...

CVE-2022-29438 WordPress Image Slider by NextCode plugin <= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated author or higher user role Persistent Cross-Site Scripting XSS vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress...

CVE-2022-29438

CVE-2022-29438 affects the WordPress plugin Image Slider by NextCode (versions

CVE-2022-29437 WordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Image Slider by NextCode plugin = 1.1.2 at WordPress...

CVE-2022-29437

CVE-2022-29437 concerns the WordPress plugin Image Slider by NextCode (versions

CVE-2022-29437 WordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Image Slider by NextCode plugin = 1.1.2 at WordPress...

PT-2022-19612

Name of the Vulnerable Software and Affected Versions Image Slider by NextCode plugin versions = 1.1.2 Description The issue is an Authenticated Persistent Cross-Site Scripting XSS vulnerability. This means that an attacker with at least author-level access can inject malicious scripts into the...

PT-2022-21203

Name of the Vulnerable Software and Affected Versions XO Slider plugin versions = 3.3.2 Description The issue is an Authenticated Stored Cross-Site Scripting XSS vulnerability. It affects users with a contributor or higher user role. There is no information provided about the estimated number of...

WordPress plugin XO Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...