CVE-2025-24681

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Product Carousel Slider & Grid Ultimate for WooCommerce woo-product-carousel-slider-and-grid-ultimate allows Stored XSS.This issue affects Product Carousel Slider & Grid Ultimate for...

CVE-2024-44048

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpWax Product Carousel Slider & Grid Ultimate for WooCommerce woo-product-carousel-slider-and-grid-ultimate.This issue affects Product Carousel Slider & Grid Ultimate for...

CVE-2025-24681

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Product Carousel Slider & Grid Ultimate for WooCommerce woo-product-carousel-slider-and-grid-ultimate allows Stored XSS.This issue affects Product Carousel Slider & Grid Ultimate for...

CVE-2025-24681

CVE-2025-24681 concerns the WordPress plugin Product Carousel Slider & Grid Ultimate for WooCommerce . The vulnerability is an Stored Cross-Site Scripting (XSS) arising from improper neutralization of input during web page generation, affecting versions from n/a up to and including 1.10.0. Public...

CVE-2024-44048

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpWax Product Carousel Slider & Grid Ultimate for WooCommerce woo-product-carousel-slider-and-grid-ultimate.This issue affects Product Carousel Slider & Grid Ultimate for...

CVE-2024-44048

CVE-2024-44048 affects WordPress plugin Product Carousel Slider & Grid Ultimate for WooCommerce (wpWax) up to version 1.9.10. The vulnerability is an Authenticated Local File Inclusion due to improper restriction of pathnames (Path Traversal) that can be exploited by users with Contributor+ privi...

PT-2024-30915 · WordPress · Wpwax Product Carousel Slider & Grid Ultimate

Name of the Vulnerable Software and Affected Versions: wpWax Product Carousel Slider & Grid Ultimate for WooCommerce versions 1.9.10 and earlier Description: The issue is related to a Path Traversal vulnerability, which allows PHP Local File Inclusion. This vulnerability can be exploited by a...