CVE-2022-2382

The CVE-2022-2382 entry affects the WordPress plugin Product Slider for WooCommerce (versions before 2.5.7). The underlying issue is flawed CSRF checks and incomplete authorization in certain AJAX actions, enabling any authenticated user (e.g., a subscriber) to invoke those actions and, in at lea...

CVE-2022-4629

The CVE‑2022‑4629 entry concerns the WordPress plugin Product Slider for WooCommerce (versions prior to 2.6.4). The vulnerability arises from failure to validate and escape certain shortcode attributes, allowing a user with as little as a contributor role to trigger a stored XSS, potentially impa...