Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Majeed Raza Component: Carousel Slider Clear all filters
TI-2023-22241 CVE-2023-41848 · GHSA-2v26-7fm5-rmj8

WordPress Carousel Slider plugin <= 2.2.2 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0056 Published 2024-12-13 No fix listed CWE-862
TI-2024-06352 CVE-2024-6850 · GHSA-gq5m-j7gp-3x7q

Carousel Slider < 2.2.14 - Editor+ Stored XSS

Priority MEDIUM 55

The Carousel Slider WordPress plugin before 2.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_htm…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00339 Published 2024-09-13 Fixed in 2.2.4 CWE-79
TI-2024-30342 CVE-2024-45270 · GHSA-2745-8q5m-h58w

Cross-site request forgery in Sayful Islam Carousel Slider

Priority LOW 19

WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Hero image selection feature.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00228 Published 2024-09-01 Fixed in 2.2.4 CWE-352
TI-2024-30341 CVE-2024-45269 · GHSA-7cvv-34h5-xg2q

Cross-site request forgery in Sayful Islam Carousel Slider

Priority LOW 20

WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Carousel image selection feature.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00272 Published 2024-09-01 Fixed in 2.0 CWE-352
TI-2024-04074 CVE-2024-4372 · GHSA-vw93-wqr3-x7vr

Carousel Slider < 2.2.11 - Editor+ Stored XSS

Priority LOW 25

The Carousel Slider WordPress plugin before 2.2.11 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00399 Published 2024-05-21 Fixed in 2.2.11 CWE-79
TI-2024-03453 CVE-2024-3703 · GHSA-5j2x-3vh5-xrw2

Carousel Slider < 2.2.10 - Editor+ Stored XSS

Priority MEDIUM 55

The Carousel Slider WordPress plugin before 2.2.10 does not validate and escape some of its Slide options before outputting them back in the page/post where the related Slide shortcode is embed, which could allow users w…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00497 Published 2024-05-03 Fixed in 2.2.10 CWE-79
TI-2024-01592 CVE-2024-1712 · GHSA-wq89-j555-p43g

Carousel Slider < 2.2.7 - Editor+ Stored XSS

Priority MEDIUM 55

The Carousel Slider WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00484 Published 2024-04-15 Fixed in 2.2.7 CWE-79