Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: gopiplus Component: Horizontal Scrolling Announcement Clear all filters
TI-2023-04601 CVE-2023-4999 · GHSA-xqpc-wjc5-8chx

Horizontal scrolling announcement <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode

Priority MEDIUM 42

The Horizontal scrolling announcement plugin for WordPress is vulnerable to SQL Injection via the plugin's [horizontal-scrolling] shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user s…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00925 Published 2023-10-20 No fix listed CWE-89
TI-2023-04603 CVE-2023-5001 · GHSA-rppx-qcj7-pwc2

Horizontal scrolling announcement <= 9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The Horizontal scrolling announcement plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'horizontal-scrolling' shortcode in versions up to, and including, 9.2 due to insufficient input sanitization an…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0039 Published 2023-09-16 No fix listed CWE-79