Read the docs

Majeed Raza

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Majeed Raza records in CISA KEV

No Majeed Raza vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Carousel Slider 7 records MEDIUM

Records

7 records in Carousel Slider · all components

TI-2024-06352 CVE-2024-6850 · GHSA-gq5m-j7gp-3x7q

Carousel Slider < 2.2.14 - Editor+ Stored XSS

Priority MEDIUM 55

The Carousel Slider WordPress plugin before 2.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_htm…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00339 Published 2024-09-13 Fixed in 2.2.4 CWE-79
TI-2024-03453 CVE-2024-3703 · GHSA-5j2x-3vh5-xrw2

Carousel Slider < 2.2.10 - Editor+ Stored XSS

Priority MEDIUM 55

The Carousel Slider WordPress plugin before 2.2.10 does not validate and escape some of its Slide options before outputting them back in the page/post where the related Slide shortcode is embed, which could allow users w…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00497 Published 2024-05-03 Fixed in 2.2.10 CWE-79
TI-2024-01592 CVE-2024-1712 · GHSA-wq89-j555-p43g

Carousel Slider < 2.2.7 - Editor+ Stored XSS

Priority MEDIUM 55

The Carousel Slider WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00484 Published 2024-04-15 Fixed in 2.2.7 CWE-79
TI-2023-22241 CVE-2023-41848 · GHSA-2v26-7fm5-rmj8

WordPress Carousel Slider plugin <= 2.2.2 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0056 Published 2024-12-13 No fix listed CWE-862
TI-2024-04074 CVE-2024-4372 · GHSA-vw93-wqr3-x7vr

Carousel Slider < 2.2.11 - Editor+ Stored XSS

Priority LOW 25

The Carousel Slider WordPress plugin before 2.2.11 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00399 Published 2024-05-21 Fixed in 2.2.11 CWE-79
TI-2024-30341 CVE-2024-45269 · GHSA-7cvv-34h5-xg2q

Cross-site request forgery in Sayful Islam Carousel Slider

Priority LOW 20

WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Carousel image selection feature.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00272 Published 2024-09-01 Fixed in 2.0 CWE-352
TI-2024-30342 CVE-2024-45270 · GHSA-2745-8q5m-h58w

Cross-site request forgery in Sayful Islam Carousel Slider

Priority LOW 19

WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Hero image selection feature.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00228 Published 2024-09-01 Fixed in 2.2.4 CWE-352
Open these records in search →