I13websolution

Thumbnail Carousel Slider

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2015-10144

Exploit
  • EPSS 0.58%
  • Veröffentlicht 25.07.2025 03:15:32
  • Zuletzt bearbeitet 16.12.2025 14:57:31

The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploader in versions up to 1.0.1. This makes it possible for authenticated attackers, with subscri...

4.9

CVE-2019-25222

  • EPSS 0.44%
  • Veröffentlicht 15.03.2025 06:40:02
  • Zuletzt bearbeitet 21.03.2025 11:08:00

The Thumbnail carousel slider plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5

CVE-2023-5821

  • EPSS 0.07%
  • Veröffentlicht 27.10.2023 12:15:09
  • Zuletzt bearbeitet 21.11.2024 08:42:33

The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the deleteselected function. This makes it possible for unauthenticated attackers to delete slid...

6.1

CVE-2023-1915

Exploit
  • EPSS 0.14%
  • Veröffentlicht 15.05.2023 13:15:10
  • Zuletzt bearbeitet 24.01.2025 21:15:10

The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting vulnerability which could be used against high privilege users s...

6.1

CVE-2023-2120

  • EPSS 1.28%
  • Veröffentlicht 18.04.2023 02:15:07
  • Zuletzt bearbeitet 21.11.2024 07:57:58

The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possibl...