Export limit exceeded: 425824 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2022-44741

WordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testimonial Slider plugin <= 1.3.1 on WordPress.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Slidervilla
Products
Testimonial Slider
CVE-2018-5374

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Slidervilla
Products
Dbox Slider
CVE-2018-5373

The Smooth Slider plugin through 2.8.6 for WordPress has SQL Injection via smooth-slider.php (trid parameter).

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Slidervilla
Products
Smooth Slider
CVE-2018-5372

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Slidervilla
Products
Testimonial Slider
CVE-2015-9454

The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin current_slider_id parameter.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Slidervilla
Products
Smooth Slider