Read the docs

wp-buy

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

wp-buy records in CISA KEV

No wp-buy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Owl Carousel Slider · all components

TI-2024-12667 CVE-2024-13627 · GHSA-rwgq-769w-9jq7

WP Touch Slider <= 2.2 - Reflected XSS

Priority LOW 23

The OWL Carousel Slider WordPress plugin through 2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege…

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00838 Published 2025-02-17 No fix listed CWE-79
Open these records in search →