Read the docs

nik00726

Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

nik00726 records in CISA KEV

No nik00726 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Email Subscription Popup 5 records MEDIUM Thumbnail Carousel Slider 5 records MEDIUM Thumbnail Slider With Lightbox 4 records MEDIUM Video Carousel Slider With Lightbox 4 records LOW Easy Testimonial Slider And Form 3 records LOW Team Circle Image Slider With Lightbox 3 records LOW Photo Gallery Slideshow & Masonry Tiled Gallery 2 records LOW Responsive Filterable Portfolio 2 records LOW

Records

3 records in Team Circle Image Slider With Lightbox · all components

TI-2022-00564 CVE-2022-0648 · GHSA-5c6j-pf48-q4gh

Team Circle Image Slider With Lightbox < 1.0.16 - Reflected Cross-Site Scripting

Priority LOW 29

The Team Circle Image Slider With Lightbox WordPress plugin before 1.0.16 does not sanitize and escape the order_pos parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-14 Fixed in 1.0.16 CWE-79
TI-2023-02434 CVE-2023-2604 · GHSA-65mf-5rmq-4984

Team Circle Image Slider With Lightbox <= 1.0.17 - Reflected Cross-Site Scripting

Priority LOW 28

The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.0.17 due to insufficient input sanitizat…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00433 Published 2023-06-09 No fix listed CWE-79
Open these records in search →