CVE-2015-9417

The CVE-2015-9417 entry concerns the WordPress plugin testimonial-slider (versions up to 1.2.1). A CSRF vulnerability enables a cross-site scripting (XSS) condition in this plugin. Some connected sources indicate exploitation requires privileged access (administrator level) and that the XSS can b...

CVE-2015-9417

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS...

CVE-2015-9412

CVE-2015-9412 affects the WordPress plugin Royal-Slider (vulnerable: before 3.2.7). The issue is an XSS in the site’s admin UI via the rstype parameter when creating/editing a slider. Several connected sources corroborate: Red Hat and CNVD entries describe the same XSS in the Royal-Slider plugin;...

CVE-2015-9412: Improper Neutralization of Input During Web Page Generation

The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter...

CVE-2015-9417: Cross-Site Request Forgery (CSRF)

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS...

PT-2019-7376

Name of the Vulnerable Software and Affected Versions testimonial-slider plugin versions prior to 1.2.2 Description The issue concerns a CSRF vulnerability that results in XSS. This means an attacker can trick a user into performing unintended actions on the website, potentially leading to the...

PT-2019-7371

Name of the Vulnerable Software and Affected Versions Royal-Slider plugin versions prior to 3.2.7 Description The issue concerns a cross-site scripting XSS flaw via the rstype parameter. This allows for potential malicious script injection, affecting the security of the plugin. Recommendations Fo...

WordPreess Crelly Slider Plugin < 1.3.5 Arbitrary File Upload Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113512";...

WordPress crelly-slider plugin code issue vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. crelly-slider is an open source responsive slider plugin used in it. A code issue vulnerability exists in the WordPress...

CVE-2019-15866

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...

Default credentials

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...

CVE-2019-15866

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...

CVE-2019-15866

The CVE-2019-15866 entry concerns the WordPress crelly-slider plugin. Concrete details from connected documents show: the plugin before 1.3.5 permits arbitrary file upload by placing a PHP file inside a ZIP archive and sending it to wp_ajax_crellyslider_importSlider. This is a remote vulnerabilit...

CVE-2019-15866

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...

CVE-2019-15866: Unrestricted Upload of File with Dangerous Type

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...

PT-2019-14445

Name of the Vulnerable Software and Affected Versions crelly-slider plugin versions prior to 1.3.5 Description The issue allows for arbitrary file upload through a PHP file inside a ZIP archive to the wp ajax crellyslider importSlider endpoint. This can be exploited by uploading malicious files...

WordPress Crelly Slider plugin <= 1.3.4 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability found by NinTechNet in WordPress Crelly Slider plugin versions = 1.3.4. Solution Update the WordPress Crelly Slider plugin to the latest available version at least 1.3.5...

Crelly Slider <= 1.3.4 - Arbitrary File Upload

The Crelly Slider WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Joomla Ari Image Slider CSRF Backdoor Access Vulnerability

Joomla is an open source content management system CMS. A CSRF backdoor access vulnerability exists in Joomla Ari Image Slider. An attacker can exploit the vulnerability to spoof a client to make an unintentional request to the web server, which may result in data exposure or unintended code...

Joomla ARI Image Slider 2.2.0 Cross Site Request Forgery / Shell Upload

Exploit Title : Joomla ARI Image Slider 2.2.0 CSRF Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 27/03/2019 Vendor Homepage : ari-soft.com Software Download Link : ari-soft.com/Joomla-Components/ARI-Image-Slider/Detailed-product-flyer.html Softwar...