Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: 2joomla Component: 2j Slideshow Clear all filters
TI-2020-18900 CVE-2020-36729 · GHSA-xcjx-743r-9w2w

Slideshow, Image Slider by 2J <= 1.3.31 - Authorization Bypass

Priority LOW 26

The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'twoj_slideshow_setup' function called via the wp_ajax_twoj_slideshow_setup AJAX action in versions up…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00715 Published 2023-06-07 No fix listed CWE-285
TI-2022-11896 CVE-2022-29426 · GHSA-79v6-3g86-v959

Cross-site scripting in 2J Slideshow Team Slideshow, Image Slider by 2J

Priority LOW 25

Authenticated (contributor or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in 2J Slideshow Team's Slideshow, Image Slider by 2J plugin <= 1.3.54 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00535 Published 2022-05-20 No fix listed CWE-79