TR
Vendor
Tribulant
31
CVEs
0
On KEV
0
New 30D
Products
NE9.8
Newsletters
Tribulant
15 CVEs0 on KEV0 new
SG9.8
Slideshow Gallery
Tribulant
10 CVEs0 on KEV0 new
SG8.8
Slideshow Gallery LITE
Tribulant
3 CVEs0 on KEV0 new
NE8.8
Newsletter
Tribulant
1 CVEs0 on KEV0 new
OC8.8
One Click Ssl
Tribulant
1 CVEs0 on KEV0 new
TS–
Tibulant Slideshow Gallery
Tribulant
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-4857 | NE Newsletters Tribulant | 7.2 | May 31 | Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion |
| CVE-2024-13739 | NE Newsletters Tribulant | 6.1 | Mar 22 | Newsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To Parameter |
| CVE-2024-10181 | NE Newsletters Tribulant | 6.4 | Oct 29 | Newsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode |
| CVE-2024-8247 | NE Newsletters Tribulant | 8.8 | Sep 6 | Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation |
| CVE-2024-43279 | NE Newsletters Tribulant | 7.1 | Aug 18 | WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-7411 | NE Newsletters Tribulant | 5.3 | Aug 15 | Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure |
| CVE-2024-37227 | NE Newsletters Tribulant | 8.8 | Jun 21 | WordPress Newsletters plugin <= 4.9.7 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-5543 | SG Slideshow Gallery Lite Tribulant | 8.1 | Jun 12 | Slideshow Gallery LITE <= 1.8.1 - Authenticated (Contributor+) SQL Injection |
| CVE-2024-35718 | NE Newsletters Tribulant | 6.1 | Jun 8 | WordPress Newsletters plugin <= 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-32954 | NE Newsletters Tribulant | 9.1 | Apr 24 | WordPress Newsletters plugin <= 4.9.5 - Arbitrary File Upload vulnerability |
| CVE-2024-32953 | NE Newsletters Tribulant | 7.5 | Apr 24 | WordPress Newsletters plugin <= 4.9.5 - Sensitive Data Exposure vulnerability |
| CVE-2024-31354 | SG Slideshow Gallery Tribulant | 4.3 | Apr 12 | WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-31355 | SG Slideshow Gallery Tribulant | 8.5 | Apr 10 | WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Auth. SQL Injection vulnerability |
| CVE-2024-31353 | SG Slideshow Gallery Tribulant | 5.3 | Apr 10 | WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability |
| CVE-2023-4797 | NE Newsletters Tribulant | 7.2 | Jan 16 | Newsletter Lite < 4.9.3 - Admin+ Command Injection |
| CVE-2023-28491 | SG Slideshow Gallery LITE Tribulant | 7.2 | Dec 20 | WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection |
| CVE-2023-28497 | SG Slideshow Gallery LITE Tribulant | 8.8 | Nov 12 | WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-30478 | NE Newsletters Tribulant | 8.8 | Nov 10 | WordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2021-24882 | SG Slideshow Gallery Tribulant | 4.8 | Nov 23 | Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site Scripting |
| CVE-2020-35932 | NE Newsletter Tribulant | 8.8 | Jan 1 | Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers) to use the… |
| CVE-2019-15828 | OC One Click Ssl Tribulant | 8.8 | Aug 30 | The one-click-ssl plugin before 1.4.7 for WordPress has CSRF |
| CVE-2018-20987 | NE Newsletters Tribulant | 9.8 | Aug 22 | The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection |
| CVE-2019-14788 | NE Newsletters Tribulant | 8.8 | Aug 15 | wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resultant remote PHP code… |
| CVE-2019-14787 | NE Newsletters Tribulant | 5.4 | Aug 9 | The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor contentarea parameter |
| CVE-2018-18019 | SG Slideshow Gallery Tribulant | 6.1 | Apr 15 | XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slide[title], Slide[media_file], or… |
| CVE-2018-18018 | SG Slideshow Gallery Tribulant | 9.8 | Apr 15 | SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title]… |
| CVE-2018-18017 | SG Slideshow Gallery Tribulant | 6.1 | Apr 15 | XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter |
| CVE-2018-17946 | SG Slideshow Gallery Tribulant | 6.1 | Oct 3 | The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter |
| CVE-2014-5460 | TS Tibulant Slideshow Gallery Tribulant | – | Sep 11 | Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by… |