Vulnerabilities

TI-2023-04997 CVE-2023-5428 · GHSA-rxfq-72pg-7hxp

Image vertical reel scroll slideshow <= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

MEDIUM 42

The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0 due to insufficient escaping on the user supplied parameter an…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01026 Published 2023-10-31 No fix listed CWE-89

TI-2023-24099 CVE-2023-45051 · GHSA-377v-9whx-fp3q

WordPress Image vertical reel scroll slideshow Plugin <= 9.0 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Image vertical reel scroll slideshow plugin <= 9.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-10-18 No fix listed CWE-79

Vulnerabilities

Filters

Image vertical reel scroll slideshow <= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

WordPress Image vertical reel scroll slideshow Plugin <= 9.0 is vulnerable to Cross Site Scripting (XSS)