Read the docs

PickPlugins

Records90All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9

Exploited now

PickPlugins records in CISA KEV

No PickPlugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Post Grid 14 records MEDIUM Team Showcase 5 records MEDIUM Comboblocks 3 records LOW Post Grid Combo 3 records MEDIUM Product Slider For Woocommerce 3 records MEDIUM Accordion 2 records LOW Breadcrumb 1 record MEDIUM Pricing Table 1 record LOW

Records

3 records in Product Slider For Woocommerce · all components

TI-2023-00160 CVE-2023-0166 · GHSA-xqq2-vhw7-qwjw

PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS

Priority MEDIUM 58

The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, whi…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00477 Published 2023-02-13 Fixed in 1.13.42
TI-2021-06592 CVE-2021-24300 · GHSA-72xr-97qw-3wch

PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)

Priority MEDIUM 40

The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.10587 Published 2021-05-24 Fixed in 1.13.22 CWE-79
TI-2024-30502 CVE-2024-45459 · GHSA-f4cg-5v3q-jpw3

Cross-site scripting in PickPlugins Product Slider for WooCommerce

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Product Slider for WooCommerce woocommerce-products-slider allows Reflected XSS.This issue affects Product…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-09-15 No fix listed CWE-79
Open these records in search →