Browse CVEs

HIGH 8.8 CVE-2015-10144 The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the ima… Thumbnail Carousel Slider after 1.0.1 Fix from $1,9502025-07-25 MEDIUM 6.4 CVE-2024-11195 The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_email_subscribe_form shortcode … Email Subscription Popup 1.2.23+ Fix from $1,6002024-11-19 HIGH 8.8 CVE-2024-30497 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in I Thirteen Web Solution WP Responsive Tabs hori… Wp Responsive Tabs 1.1.18+ Fix from $1,9502024-03-29 MEDIUM 6.1 CVE-2024-27960 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Email Subscription Popu… Email Subscription Popup 1.2.21+ Fix from $1,6002024-03-17 MEDIUM 6.1 CVE-2023-6555 The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting it back in the page, leading t… Email Subscription Popup 1.2.20+ Fix from $1,6002024-01-08 MEDIUM 6.1 CVE-2023-6527 The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER header in all versions up to, … Email Subscription Popup 1.2.19+ Fix from $1,6002023-12-06 MEDIUM 5.4 CVE-2023-5945 The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or in… Video Carousel Slider With Lightbox Patch available Fix from $1,6002023-11-03 MEDIUM 6.5 CVE-2023-5821 The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validatio… Thumbnail Carousel Slider Mitigation only Fix from $1,6002023-10-27 HIGH 8.8 CVE-2023-5820 The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorre… Thumbnail Slider With Lightbox Patch available Fix from $1,9502023-10-27 MEDIUM 6.1 CVE-2023-41658 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery plugin <= 1.0.1… Web Solution Photo Gallery Slideshow \& Masonry Tiled Gallery after 1.0.13 Fix from $1,6002023-09-29 MEDIUM 6.1 CVE-2023-32597 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Gallery plugin <= 1.0.10 versions. Video Gallery after 1.0.10 Fix from $1,6002023-08-30 MEDIUM 6.1 CVE-2023-32797 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution video carousel slider with lightbox plugin <= 1.0.22 versions. Video Carousel Slider With Lightbox after 1.0.22 Fix from $1,6002023-08-25 MEDIUM 6.1 CVE-2023-30785 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Grid plugin <= 1.21 versions. Video Grid after 1.21 Fix from $1,6002023-08-16 MEDIUM 6.1 CVE-2023-30489 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <= 1.2.16 versions. Email Subscription Popup after 1.2.16 Fix from $1,6002023-08-14 MEDIUM 6.1 CVE-2023-24409 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs plugi… Wp Responsive Tabs Horizontal Vertical And Accordion Tabs 1.1.16+ Fix from $1,6002023-08-08 MEDIUM 6.1 CVE-2023-24413 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WordPress vertical image slider plugin <= 1.2.16 versions. Wordpress Vertical Image Slider 1.2.17+ Fix from $1,6002023-08-08 MEDIUM 6.1 CVE-2023-28776 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versio… Continuous Image Carousel With Lightbox after 1.0.15 Fix from $1,6002023-06-22 MEDIUM 6.1 CVE-2023-2604 The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in ve… Team Circle Image Slider With Lightbox after 1.0.17 Fix from $1,6002023-06-09 MEDIUM 6.1 CVE-2023-2289 The wordpress vertical image slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions … Wordpress Vertical Image Slider 1.2.17+ Fix from $1,6002023-06-09 MEDIUM 6.1 CVE-2023-2402 The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term paramete… Photo Gallery Slideshow \& Masonry Tiled Gallery after 1.0.13 Fix from $1,6002023-06-09 MEDIUM 6.1 CVE-2023-2184 The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_ter… Wp Responsive Tabs 1.1.16+ Fix from $1,6002023-06-09 MEDIUM 6.1 CVE-2023-2708 The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and includi… Video Gallery 1.0.11+ Fix from $1,6002023-05-16 MEDIUM 6.1 CVE-2023-2710 The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in version… Video Carousel Slider With Lightbox 1.0.23+ Fix from $1,6002023-05-16 MEDIUM 6.1 CVE-2023-1915 The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputting them back in pages, leadi… Thumbnail Carousel Slider 1.1.10+ Fix from $1,6002023-05-15 MEDIUM 6.1 CVE-2022-47600 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Mass Email To users plugin <= 1.1.4 versions. Mass Email To Users after 1.1.4 Fix from $1,6002023-05-10 MEDIUM 6.1 CVE-2023-24392 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin <= 1.1.7 versions. Full Width Banner Slider Wp after 1.1.7 Fix from $1,6002023-05-10 MEDIUM 6.1 CVE-2022-46799 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form plugin <= 1.0.15 versions. Easy Testimonial Slider And Form 1.0.16+ Fix from $1,6002023-05-08 MEDIUM 6.1 CVE-2023-2119 The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up… Responsive Filterable Portfolio after 1.0.19 Fix from $1,6002023-04-18 MEDIUM 6.1 CVE-2023-2120 The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, a… Thumbnail Carousel Slider after 1.1.9 Fix from $1,6002023-04-18 MEDIUM 6.1 CVE-2023-28792 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versio… Continuous Image Carosel With Lightbox 1.0.16+ Fix from $1,6002023-04-07