SL
Product
Slider
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 7Low 0
Watch
Add Slider to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7150 | 8.8 | Aug 8 | The Slider by 10Web – Responsive Image Slider plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.2.57… Affected: before 1.2.58 |
| CVE-2021-24132 | 8.8 | Mar 18 | The Slider by 10Web WordPress plugin, versions before 1.2.36, in the bulk_action, export_full and save_slider_db functionalities of the plugin were vulnerable, allowing a high… Affected: before 1.2.36 |
| CVE-2024-10566 | 6.1 | Mar 25 | The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 1.2.62 |
| CVE-2024-10565 | 6.1 | Mar 25 | The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 1.2.62 |
| CVE-2024-32578 | 6.1 | Apr 18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Slider by 10Web allows Reflected XSS.This issue affects Slider by… Affected: before 1.2.55 |
| CVE-2024-6408 | 5.4 | Jul 31 | The Slider by 10Web WordPress plugin before 1.2.57 does not sanitise and escape its Slider Title, which could allow high privilege users such as editors and above to perform… Affected: before 1.2.57 |
| CVE-2024-6026 | 5.4 | Jul 11 | The Slider by 10Web WordPress plugin before 1.2.56 does not sanitise and escape some of its Slide options, which could allow authenticated users with access to the Sliders (by… Affected: before 1.2.56 |
| CVE-2024-8283 | 4.8 | Sep 30 | The Slider by 10Web WordPress plugin before 1.2.59 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 1.2.59 |
| CVE-2022-4197 | 4.8 | Dec 26 | The Sliderby10Web WordPress plugin before 1.2.53 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 1.2.53 |
Showing 9