Vulnerability index

Browse CVEs

31 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Thumbnail Carousel Slider HIGH 8.8
CVE-2015-10144

The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the ima…

Fix: after 1.0.1
Fix from $1,950 2025-07-25
Email Subscription Popup MEDIUM 6.4
CVE-2024-11195

The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_email_subscribe_form shortcode …

Fix: 1.2.23+
Fix from $1,600 2024-11-19
Wp Responsive Tabs HIGH 8.8
CVE-2024-30497

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in I Thirteen Web Solution WP Responsive Tabs hori…

Fix: 1.1.18+
Fix from $1,950 2024-03-29
Email Subscription Popup MEDIUM 6.1
CVE-2024-27960

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Email Subscription Popu…

Fix: 1.2.21+
Fix from $1,600 2024-03-17
Email Subscription Popup MEDIUM 6.1
CVE-2023-6555

The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting it back in the page, leading t…

Fix: 1.2.20+
Fix from $1,600 2024-01-08
Email Subscription Popup MEDIUM 6.1
CVE-2023-6527

The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER header in all versions up to, …

Fix: 1.2.19+
Fix from $1,600 2023-12-06
Video Carousel Slider With Lightbox MEDIUM 5.4
CVE-2023-5945

The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or in…

Patch available
Fix from $1,600 2023-11-03
Thumbnail Carousel Slider MEDIUM 6.5
CVE-2023-5821

The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validatio…

Mitigation only
Fix from $1,600 2023-10-27
Thumbnail Slider With Lightbox HIGH 8.8
CVE-2023-5820

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorre…

Patch available
Fix from $1,950 2023-10-27
Web Solution Photo Gallery Slideshow \& Masonry Tiled Gallery MEDIUM 6.1
CVE-2023-41658

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery plugin <= 1.0.1…

Fix: after 1.0.13
Fix from $1,600 2023-09-29
Video Gallery MEDIUM 6.1
CVE-2023-32597

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Gallery plugin <= 1.0.10 versions.

Fix: after 1.0.10
Fix from $1,600 2023-08-30
Video Carousel Slider With Lightbox MEDIUM 6.1
CVE-2023-32797

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution video carousel slider with lightbox plugin <= 1.0.22 versions.

Fix: after 1.0.22
Fix from $1,600 2023-08-25
Video Grid MEDIUM 6.1
CVE-2023-30785

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Grid plugin <= 1.21 versions.

Fix: after 1.21
Fix from $1,600 2023-08-16
Email Subscription Popup MEDIUM 6.1
CVE-2023-30489

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <= 1.2.16 versions.

Fix: after 1.2.16
Fix from $1,600 2023-08-14
Wp Responsive Tabs Horizontal Vertical And Accordion Tabs MEDIUM 6.1
CVE-2023-24409

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs plugi…

Fix: 1.1.16+
Fix from $1,600 2023-08-08
Wordpress Vertical Image Slider MEDIUM 6.1
CVE-2023-24413

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WordPress vertical image slider plugin <= 1.2.16 versions.

Fix: 1.2.17+
Fix from $1,600 2023-08-08
Continuous Image Carousel With Lightbox MEDIUM 6.1
CVE-2023-28776

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versio…

Fix: after 1.0.15
Fix from $1,600 2023-06-22
Team Circle Image Slider With Lightbox MEDIUM 6.1
CVE-2023-2604

The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in ve…

Fix: after 1.0.17
Fix from $1,600 2023-06-09
Wordpress Vertical Image Slider MEDIUM 6.1
CVE-2023-2289

The wordpress vertical image slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions …

Fix: 1.2.17+
Fix from $1,600 2023-06-09
Photo Gallery Slideshow \& Masonry Tiled Gallery MEDIUM 6.1
CVE-2023-2402

The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term paramete…

Fix: after 1.0.13
Fix from $1,600 2023-06-09
Wp Responsive Tabs MEDIUM 6.1
CVE-2023-2184

The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_ter…

Fix: 1.1.16+
Fix from $1,600 2023-06-09
Video Gallery MEDIUM 6.1
CVE-2023-2708

The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and includi…

Fix: 1.0.11+
Fix from $1,600 2023-05-16
Video Carousel Slider With Lightbox MEDIUM 6.1
CVE-2023-2710

The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in version…

Fix: 1.0.23+
Fix from $1,600 2023-05-16
Thumbnail Carousel Slider MEDIUM 6.1
CVE-2023-1915

The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputting them back in pages, leadi…

Fix: 1.1.10+
Fix from $1,600 2023-05-15
Mass Email To Users MEDIUM 6.1
CVE-2022-47600

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Mass Email To users plugin <= 1.1.4 versions.

Fix: after 1.1.4
Fix from $1,600 2023-05-10
Full Width Banner Slider Wp MEDIUM 6.1
CVE-2023-24392

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin <= 1.1.7 versions.

Fix: after 1.1.7
Fix from $1,600 2023-05-10
Easy Testimonial Slider And Form MEDIUM 6.1
CVE-2022-46799

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form plugin <= 1.0.15 versions.

Fix: 1.0.16+
Fix from $1,600 2023-05-08
Responsive Filterable Portfolio MEDIUM 6.1
CVE-2023-2119

The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up…

Fix: after 1.0.19
Fix from $1,600 2023-04-18
Thumbnail Carousel Slider MEDIUM 6.1
CVE-2023-2120

The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, a…

Fix: after 1.1.9
Fix from $1,600 2023-04-18
Continuous Image Carosel With Lightbox MEDIUM 6.1
CVE-2023-28792

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versio…

Fix: 1.0.16+
Fix from $1,600 2023-04-07