4 matches found
CVE-2025-8676
CVE-2025-8676 concerns the WordPress plugin B Slider – Gutenberg Slider Block for WP (vulnerable:
CVE-2025-8418
CVE-2025-8418 : B Slider – Gutenberg Slider Block for WP (WordPress) is vulnerable up to version 1.1.30 due to missing capability checks on the activated_plugin function. Authenticated users with subscriber-level access or higher can install arbitrary plugins, potentially enabling remote code exe...
CVE-2021-24640: Improper Neutralization of Input During Web Page Generation
The WordPress Slider Block Gutenslider plugin before 5.2.0 does not escape the minWidth attribute of a Gutenburg block, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...
PT-2021-16157
Name of the Vulnerable Software and Affected Versions WordPress Slider Block Gutenslider plugin versions prior to 5.2.0 Description The issue concerns a lack of proper escaping for the minWidth attribute in a Gutenberg block, potentially allowing users with a role as low as contributor to perform...