WordPress Plugin Vulnerabilities

LayerSlider <= 6.2.0 - CSRF / Authenticated Stored XSS & SQL Injection

Description

The LayerSlider WordPress plugin was affected by a CSRF / Authenticated Stored XSS & SQL Injection security vulnerability.

Affects Plugins

Plugin icon
LayerSlider
Fixed in 6.2.1

References

URL
http://wphutte.com/layer-slider-6-1-6-csrf-to-xss-to-sqli-with-poc/

Miscellaneous

Submitter
WpHutte
Submitter website
http://wphutte.com
Submitter twitter
@wphutte
Verified
No
WPVDB ID
9e426e65-7373-4934-89c3-42d5c1152a74

Timeline

Publicly Published
2017-05-16 (about 8 years ago)
Added
2017-05-17 (about 8 years ago)
Last Updated
2025-06-19 (about 9 months ago)

Other

Published
Title
Published
2014-08-01
Title
Leaflet Maps Marker - Multiple security issues
Published
2020-01-02
Title
Postie < 1.9.41 - Post Submission Spoofing & Stored Cross-Site Scripting (XSS)
Published
2014-08-01
Title
Photoracer <= 1.0 - Multiple Vulnerabilities
Published
2014-12-17
Title
Bird Feeder <= 1.2.3 - CSRF & XSS
Published
2017-03-01
Title
Contact Form Manager < 1.4.4 - CSRF & Cross-Site Scripting (XSS)