WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
slider-by-supsystic
Published
2024-01-17
Title
Slider by Supsystic < 1.8.7 - Missing Authorization
Slug
slider-by-supsystic
Published
2024-03-28
Title
Slider by Supsystic < 1.8.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
slider-by-supsystic
Published
2024-03-26
Title
Slider by Supsystic < 1.8.11 - Authenticated (Admin+) SQL Injection
Slug
slider-comparison-image-before-and-after
Published
2024-09-09
Title
Slider comparison image before and after <= 0.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slider-factory
Published
2021-10-18
Title
Responsive Image Slider, Photo Gallery And Carousel < 1.3.2 - Slider Clone/Save/Delete via CSRF
Slug
slider-factory
Published
2021-10-20
Title
Responsive Image Slider, Photo Gallery And Carousel < 1.3.6 - Subscriber+ Arbitrary Post Access
Slug
slider-for-writers
Published
2025-01-16
Title
Slider for Writers <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
slider-future
Published
2026-02-18
Title
Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload
Slug
slider-hero
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Slug
slider-hero
Published
2021-07-26
Title
Slider Hero < 8.2.7 - Contributor+ SQL Injection
Slug
slider-hero
Published
2022-09-05
Title
Slider Hero < 8.4.4 - Admin+ Stored Cross-Site Scripting
Slug
slider-hero
Published
2024-03-25
Title
Slider Hero < 8.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
slider-hero
Published
2026-08-15
Title
Slider Hero with Video Background, Animation < 9.1.8 - Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate)
Slug
slider-hero
Published
2026-08-20
Title
Slider Hero < 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers
Slug
slider-image
Published
2015-02-19
Title
Huge IT Slider < 2.7.0 - SQL Injection
Slug
slider-image
Published
2015-07-22
Title
Slider <= 2.8.6 - Authenticated Blind SQL Injection
Slug
slider-path
Published
2025-03-31
Title
Slider Path for Elementor <= 3.0.0 - Missing Authorization
Slug
slider-pro-lite
Published
2025-01-06
Title
Slider Pro Lite <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
slider-range-htapps
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
slider-responsive-slideshow
Published
2024-02-29
Title
Slider Responsive Slideshow – Image slider, Gallery slideshow < 1.4.0 - Authenticated (Contributor+) PHP Object Injection
Slug
slider-responsive-slideshow
Published
2024-06-06
Title
Slider Responsive Slideshow – Image slider, Gallery slideshow < 1.4.2 - Missing Authorization
Slug
slider-responsive-slideshow
Published
2026-02-11
Title
Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.5.4 - Authenticated (Contributor+) PHP Object Injection
Slug
slider-slideshow
Published
2023-04-19
Title
Layer Slider <= 1.1.9.7 - Cross-Site Request Forgery
Slug
slider-slideshow
Published
2023-06-28
Title
Layer Slider <= 1.1.9.7 - Contributor+ Stored XSS
Slug
slider-slideshow
Published
2023-11-03
Title
Layer Slider <= 1.1.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting