WordPress Smart Slider 2 Plugin <= 2.3.11 - Reflected XSS

Because of this vulnerability, authenticated administrators can inject HTML or JS code. Solution Update the plugin...

Master Slider <= 2.5.1 - Authenticated Blind SQL Injection

The Master Slider – Responsive Touch Slider WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

WordPress Master Slider Plugin <= 2.5.1 - Blind SQL Injection

Because of this vulnerability, authenticated users can execute arbitrary SQL commands. Solution Upgrade this plugin...

WordPress Slider Plugin <= 2.8.6 - Blind SQL Injection

Because of this vulnerability, authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

Slider <= 2.8.6 - Authenticated Blind SQL Injection

The slider-image WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

Smooth Slider <= 2.6.5 - Authenticated SQL Injection

The Smooth Slider WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

WordPress Smooth Slider Plugin <= 2.6.5 - SQL Injection

Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands. Solution Update the plugin...

WordPress ThemePunch Slider Revolution plugin and Showbiz Pro plugin have multiple vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site.ThemePunch Slider Revolution revslider is one of the slideshow plugin.Showbiz Pro is one of the scrolling display...

WordPress Slider Revolution Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Slider Revolution revslider is one of the slideshow plugin. A cross-site scripting vulnerability exists in...

WordPress Slider Revolution Plugin Directory Traversal Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Slider Revolution revslider is one of the slideshow plugin. A directory traversal vulnerability exists in...

CVE-2015-5151

Cross-site scripting XSS vulnerability in the Slider Revolution revslider plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the clientaction parameter in a revsliderajaxaction action to wp-admin/admin-ajax.php...

CVE-2014-9735

The ThemePunch Slider Revolution revslider plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restrict access to administrator AJAX functionality, which allows remote attackers to 1 upload and execute arbitrary files via an updateplugin...

Cross site scripting

Cross-site scripting XSS vulnerability in the Slider Revolution revslider plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the clientaction parameter in a revsliderajaxaction action to wp-admin/admin-ajax.php...

Directory traversal

Directory traversal vulnerability in the Slider Revolution revslider plugin before 4.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the img parameter in a revslidershowimage action to wp-admin/admin-ajax.php...

CVE-2014-9734

Directory traversal vulnerability in the Slider Revolution revslider plugin before 4.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the img parameter in a revslidershowimage action to wp-admin/admin-ajax.php...

CVE-2014-9735

The ThemePunch Slider Revolution revslider plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restrict access to administrator AJAX functionality, which allows remote attackers to 1 upload and execute arbitrary files via an updateplugin...

CVE-2014-9735

The ThemePunch Slider Revolution (revslider) plugin (before version 3.0.96) and the Showbiz Pro plugin (version 1.7.1 and earlier) for WordPress contain a vulnerability due to improper restriction of administrator AJAX functionality . This flaw allows remote attackers to perform multiple unauthor...

CVE-2015-5151

CVE-2015-5151 affects the WordPress Slider Revolution (Revslider) plugin version 4.2.2. The vulnerability stems from inadequate validation/filtering of the client_action parameter in the revslider_ajax_action action called by wp-admin/admin-ajax.php, allowing remote attackers to inject arbitrary ...

CVE-2015-5151

Cross-site scripting XSS vulnerability in the Slider Revolution revslider plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the clientaction parameter in a revsliderajaxaction action to wp-admin/admin-ajax.php...

CVE-2014-9734

The Slider Revolution (revslider) plugin for WordPress, in versions prior to 4.2 , contains a directory traversal vulnerability. The root cause is a failure to adequately filter the img parameter in the revslider_show_image action handled by the wp-admin/admin-ajax.php script. A remote attacker c...