Lucene search
+L

1078 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•10 views

CVE-2026-22346: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object Injection.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through = 1.5.4...

8.8CVSS5.8AI score0.00409EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•37 views

PT-2026-21197

Name of the Vulnerable Software and Affected Versions A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow versions through 1.5.4 Description The software contains a flaw related to the deserialization of untrusted data, which allows for object injection. This issue impacts...

5.6AI score0.00409EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•25 views

WordPress plugin Slider Responsive Slideshow – Image slider, Gallery slideshow: Code issues and vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.8CVSS5.9AI score0.00409EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/12 1:42 p.m.•18 views

CVE-2026-1885

The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'sswp-slide' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS6.1AI score0.00271EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/02/11 11:44 a.m.•23 views

WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.5.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Slider Responsive Slideshow – Image slider, Gallery slideshow versions = 1.5.4...

8.8CVSS5.6AI score0.00409EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/02/11 9:15 a.m.•31 views

CVE-2026-1885

The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'sswp-slide' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS0.00271EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/02/11 8:26 a.m.•9 views

CVE-2026-1885 Slideshow Wp <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sswp-slide' Shortcode 'sswpid' Attribute

The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'sswp-slide' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS6.1AI score0.00271EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/02/11 8:26 a.m.•12 views

CVE-2026-1885

The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'sswp-slide' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.8AI score0.00271EPSS
SaveExploits0References4
CVE
CVE
•added 2026/02/11 8:26 a.m.•44 views

CVE-2026-1885

The CVE-2026-1885 issue affects the WordPress Slideshow Wp plugin (versions up to 1.1). It is a Stored Cross-Site Scripting (XSS) vulnerability via the sswpid attribute of the sswp-slide shortcode, caused by insufficient input sanitization/output escaping. Exploitation requires authenticated acce...

6.4CVSS6.1AI score0.00271EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/11 8:26 a.m.•48 views

CVE-2026-1885 Slideshow Wp <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sswp-slide' Shortcode 'sswpid' Attribute

The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'sswp-slide' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS0.00271EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•27 views

WordPress Plugin Slideshow WP Cross-Site Script Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.5AI score0.00271EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•37 views

PT-2026-7506

The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'sswp-slide' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.8AI score0.00271EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•8 views

CVE-2026-1885: Improper Neutralization of Input During Web Page Generation

The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'sswp-slide' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS6.1AI score0.00271EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/02/10 11:14 p.m.•25 views

WordPress Slideshow Wp plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sswp-slide' Shortcode 'sswpid' Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'sswp-slide' Shortcode 'sswpid' Attribute vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Slideshow Wp versions = 1.1...

6.4CVSS5.4AI score0.00271EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2026/02/07 12:15 a.m.•17 views

CVE-2020-37161

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to...

9.8CVSS7.2AI score0.0098EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/02/07 12:15 a.m.•11 views

CVE-2020-37162

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability in the registration key input that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload of 1608 bytes to trigger a stack-based buffer overflow and execute commands through t...

9.8CVSS7.1AI score0.00738EPSS
SaveExploits1References3
NVD
NVD
•added 2026/02/07 12:15 a.m.•22 views

CVE-2020-37161

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to...

9.8CVSS0.0098EPSS
SaveExploits1References3
NVD
NVD
•added 2026/02/07 12:15 a.m.•21 views

CVE-2020-37162

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability in the registration key input that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload of 1608 bytes to trigger a stack-based buffer overflow and execute commands through t...

9.8CVSS0.00738EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/02/07 12:00 a.m.•23 views

Wedding Slideshow Studio has security vulnerabilities

Wedding Slideshow Studio is a wedding photo and video editing software developed by the Wedding Slideshow Studio company. Version 1.36 of Wedding Slideshow Studio contains a security vulnerability; this vulnerability stems from a buffer overflow issue in the registration key input process, which...

9.8CVSS6.6AI score0.00738EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/02/07 12:00 a.m.•25 views

Wedding Slideshow Studio has security vulnerabilities

Wedding Slideshow Studio is a wedding photo and video editing software developed by the Wedding Slideshow Studio company. Version 1.36 of Wedding Slideshow Studio contains a security vulnerability; this vulnerability stems from a buffer overflow in the registration name field, which could allow f...

9.8CVSS6.7AI score0.0098EPSS
SaveExploits1References3
Rows per page
Query Builder