WordPress Plugin Google Review Slider 6.1 - tid SQL Injection

WordPress Plugin Google Review Slider 6.1 - tid SQL Injection Exploit Title: Wordpress Plugin Google Review Slider 6.1 - 'tid' SQL Injection Google Dork: inurl:"/wp-content/plugins/wp-google-places-review-slider/" Date: 2019-07-02 Exploit Author: Princy Edward Exploit Author Blog :...

WP Google Review Slider <= 6.1 - Authenticated SQL Injection

tid parameter vulnerable to SQLi. Note WPScanTeam: v6.1 has been pathed directly in the tags https://plugins.trac.wordpress.org/browser/wp-google-places-review-slider/tags/6.1/admin/partials/templatesposts.phpL58. However the the issue can be verified with v6.0 sqlmap identified the following...

WordPress Plugin Google Review Slider 6.1 - 'tid' SQL Injection

Exploit Title: Wordpress Plugin Google Review Slider 6.1 - 'tid' SQL Injection Google Dork: inurl:"/wp-content/plugins/wp-google-places-review-slider/" Date: 2019-07-02 Exploit Author: Princy Edward Exploit Author Blog : https://prinyedward.blogspot.com/ Vendor Homepage:...

CVE-2015-9454

The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin currentsliderid parameter...

Sql injection

The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin currentsliderid parameter...

CVE-2015-9454

The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin currentsliderid parameter...

CVE-2015-9454

The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin currentsliderid parameter...

CVE-2015-9454: Improper Neutralization of Special Elements used in an SQL Command

The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin currentsliderid parameter...

PT-2019-7413

Name of the Vulnerable Software and Affected Versions smooth-slider plugin versions prior to 2.7 Description The issue concerns SQL Injection via the current slider id parameter in the /wp-admin/admin.php?page=smooth-slider-admin API endpoint. This allows for potential exploitation. No informatio...

WordPress Royal-Slider plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Royal-Slider is a responsive image gallery and content slider plugin used in it. A cross-site scripting vulnerability exists in the...

WordPress testimonial-slider plugin has unspecified vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. testimonial-slider is a sliding recommendation window plugin used in it. A security vulnerability exists in WordPress testimonial-slid...

Design/Logic Flaw

The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section...

CVE-2015-9412

The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter...

CVE-2015-9417

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS...

Cross site scripting

The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter...

CVE-2015-9419

The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section...

CVE-2015-9419

CVE-2015-9419 affects the Captain Slider WordPress plugin, version 1.0.6, which is vulnerable to cross-site scripting via a Title or Caption section. The NVD records CVSS v2 base score 4.3 (MEDIUM) and CVSS v3.1 base score 6.1 (MEDIUM). No exploitation status or patches are detailed in the provid...

CVE-2015-9419: Improper Neutralization of Input During Web Page Generation

The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section...

PT-2019-7378

Name of the Vulnerable Software and Affected Versions captain-slider plugin version 1.0.6 Description The issue is related to a cross-site scripting XSS problem. It occurs via a Title or Caption section, allowing potential exploitation. Recommendations For captain-slider plugin version 1.0.6,...

CVE-2015-9417

The CVE-2015-9417 entry concerns the WordPress plugin testimonial-slider (versions up to 1.2.1). A CSRF vulnerability enables a cross-site scripting (XSS) condition in this plugin. Some connected sources indicate exploitation requires privileged access (administrator level) and that the XSS can b...