Browse CVEs

MEDIUM 5.4 CVE-2023-5432 The Jquery news ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jquery-news-ticker' shortcode in versions up to, and in… Jquery News Ticker after 3.1 Fix from $1,6002023-12-19 MEDIUM 5.4 CVE-2023-5413 The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'ihrss-gallery' shortcode in version… Image Horizontal Reel Scroll Slideshow after 13.3 Fix from $1,6002023-12-19 MEDIUM 5.3 CVE-2023-36523 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gopi Ramasamy Email download link.This issue affects Email download link:… Email Download Link after 3.7 Fix from $1,6002023-11-30 HIGH 7.5 CVE-2023-41735 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gopi Ramasamy Email posts to subscribers.This issue affects Email posts t… Email Posts To Subscribers after 6.2 Fix from $1,9502023-11-30 HIGH 8.8 CVE-2023-5465 The Popup with fancybox plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.5 due to i… Popup With Fancybox after 3.5 Fix from $1,9502023-11-22 HIGH 8.8 CVE-2023-5466 The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to in… Wp Anything Slider after 9.1 Fix from $1,9502023-11-22 HIGH 8.8 CVE-2023-47671 Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy Vertical scroll recent.This issue affects Vertical scroll recent post: from n/a thro… Vertical Scroll Recent Registered User after 9.1 Fix from $1,9502023-11-18 CRITICAL 9.8 CVE-2022-46818 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopi Ramasamy Email posts to subscribers allows… Email Posts To Subscribers after 6.2 Fix from $2,3002023-11-03 MEDIUM 6.5 CVE-2023-5436 The Vertical marquee plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 7.1 due to insu… Vertical Marquee Plugin 7.2+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5437 The WP fade in text news plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to… Wp Fade In Text News 12.1+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5438 The wp image slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to i… Wp Image Slideshow 12.1+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5439 The Wp photo text slider 50 plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.0 due … Wp Photo Text Slider 50 8.1+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5464 The Jquery accordion slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.1 d… Jquery Accordion Slideshow 8.2+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5412 The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and incl… Image Horizontal Reel Scroll Slideshow 13.3+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5428 The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and includ… Image Vertical Reel Scroll Slideshow 9.1+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5429 The Information Reel plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 10.0 due to ins… Information Reel 10.1+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5430 The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0 due to in… Jquery News Ticker 3.1+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5431 The Left right image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and includin… Left Right Image Slideshow Gallery 12.1+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5433 The Message ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.2 due to insuff… Message Ticker 9.3+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5434 The Superb slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.1 du… Superb Slideshow Gallery 13.2+ Fix from $1,6002023-10-31 MEDIUM 6.5 CVE-2023-5435 The Up down image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, … Up Down Image Slideshow Gallery 12.1+ Fix from $1,6002023-10-31 HIGH 8.8 CVE-2023-4999 The Horizontal scrolling announcement plugin for WordPress is vulnerable to SQL Injection via the plugin's [horizontal-scrolling] shortcode in versio… Horizontal Scrolling Announcement after 9.2 Fix from $1,9502023-10-20 HIGH 8.8 CVE-2023-25463 Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy WP tell a friend popup form plugin <= 7.1 versions. Wp Tell A Friend Popup Form after 7.1 Fix from $1,9502023-10-03 MEDIUM 5.4 CVE-2023-5001 The Horizontal scrolling announcement plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'horizontal-scrolling' shortcode in versi… Horizontal Scrolling Announcement after 9.2 Fix from $1,6002023-09-16