Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: PickPlugins Component: Product Slider For Woocommerce Clear all filters
TI-2024-30502 CVE-2024-45459 · GHSA-f4cg-5v3q-jpw3

Cross-site scripting in PickPlugins Product Slider for WooCommerce

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Product Slider for WooCommerce woocommerce-products-slider allows Reflected XSS.This issue affects Product…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-09-15 No fix listed CWE-79
TI-2023-00160 CVE-2023-0166 · GHSA-xqq2-vhw7-qwjw

PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS

Priority MEDIUM 58

The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, whi…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00477 Published 2023-02-13 Fixed in 1.13.42
TI-2021-06592 CVE-2021-24300 · GHSA-72xr-97qw-3wch

PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)

Priority MEDIUM 40

The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.10587 Published 2021-05-24 Fixed in 1.13.22 CWE-79