Slideshow Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Slideshow Project records in CISA KEV

No Slideshow Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Slideshow 2 records LOW

Records

2 records in Slideshow · all components

TI-2015-03075 CVE-2015-3634 · GHSA-prcg-m67x-cqrh

The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow…

LOW 39

The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow plugin 2.2.8 through 2.2.21 for Wordpress allows remote attackers to read arbitrary Wordpress option values.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03488 Published 2017-06-08 No fix listed CWE-200

TI-2022-01183 CVE-2022-1299 · GHSA-4x8p-6353-gxp9

Slideshow <= 2.3.1 - Admin+ Stored Cross-Site Scripting

LOW 23

The Slideshow WordPress plugin through 2.3.1 does not sanitize and escape some of its default slideshow settings, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when th…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-05-30 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0