nik00726

Records49All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

nik00726 records in CISA KEV

No nik00726 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Email Subscription Popup 5 records MEDIUM Thumbnail Carousel Slider 5 records MEDIUM Thumbnail Slider With Lightbox 4 records MEDIUM Video Carousel Slider With Lightbox 4 records LOW Easy Testimonial Slider And Form 3 records LOW Team Circle Image Slider With Lightbox 3 records LOW Photo Gallery Slideshow & Masonry Tiled Gallery 2 records LOW Responsive Filterable Portfolio 2 records LOW

Records

5 records in Thumbnail Carousel Slider · all components

TI-2023-01799 CVE-2023-1915 · GHSA-79jw-wx3v-29jf

Thumbnail carousel slider < 1.1.10 - Reflected XSS

MEDIUM 60

The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting vulnerability which could be used…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00477 Published 2023-05-15 Fixed in 1.1.10

TI-2015-08072 CVE-2015-10144 · GHSA-xhhw-h278-mxj8

Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload

MEDIUM 46

The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploader in versions up to 1.0.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03591 Published 2025-07-25 Fixed in 1.0.1 CWE-434

TI-2023-05357 CVE-2023-5821 · GHSA-mgv4-792h-cfj5

The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request…

LOW 29

The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0031 Published 2023-10-27 No fix listed

TI-2023-01993 CVE-2023-2120 · GHSA-2qvf-62mv-jxmq

Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting

LOW 28

The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.1.9 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00604 Published 2023-04-18 No fix listed CWE-79

TI-2019-15276 CVE-2019-25222 · GHSA-mjv9-fw9q-98gx

Thumbnail carousel slider <= 1.0.4 - Authenticated (Admin+) SQL Injection

LOW 23

The Thumbnail carousel slider plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00448 Published 2025-03-15 No fix listed CWE-89

Open these records in search →