contrid

Records36All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

contrid records in CISA KEV

No contrid vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Newsletters 11 records HIGH Slideshow Gallery 8 records MEDIUM Newsletter 1 record MEDIUM One Click Ssl 1 record LOW Tibulant Slideshow Gallery 1 record HIGH

Records

8 records in Slideshow Gallery · all components

TI-2018-12822 CVE-2018-18018 · GHSA-xprq-8xww-262w

SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via…

MEDIUM 46

SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02193 Published 2019-04-15 No fix listed CWE-89

TI-2023-13037 CVE-2023-28497 · GHSA-m64r-535p-69jq

WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery LITE plugin <= 1.7.6 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00284 Published 2023-11-12 No fix listed CWE-352

TI-2023-13031 CVE-2023-28491 · GHSA-2jv7-9rj6-jp68

WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery LITE.This issue affects Slideshow Gallery LITE: from n/a through 1.7.6.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00762 Published 2023-12-20 No fix listed CWE-89

TI-2024-20725 CVE-2024-31353 · GHSA-68qv-4jc5-hr7h

WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability

LOW 30

Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0047 Published 2024-04-10 No fix listed CWE-532

TI-2018-12823 CVE-2018-18019 · GHSA-64r4-wv53-jp79

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the…

LOW 29

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slide[title], Slide[media_file], or Slide[image_url] parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01021 Published 2019-04-15 No fix listed CWE-79

TI-2018-12821 CVE-2018-18017 · GHSA-82m7-g45g-4r5w

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the…

LOW 29

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01021 Published 2019-04-15 No fix listed CWE-79

TI-2018-12773 CVE-2018-17946 · GHSA-g8v3-4x27-wjh3

The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id…

LOW 29

The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00844 Published 2018-10-03 No fix listed CWE-79

TI-2021-07164 CVE-2021-24882 · GHSA-j64v-v3q7-95h7

Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site Scripting

LOW 23

The Slideshow Gallery WordPress plugin before 1.7.4 does not sanitise and escape the Slide "Title", "Description", and Gallery "Title" fields, which could allow high privilege users to perform Cross-Site Scripting attack…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-11-23 Fixed in 1.7.4 CWE-79

Open these records in search →

Critical	3
High	16
Medium	17
Low	0
No CVSS	0