Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: shapedplugin Component: Product Slider For Woocommerce Clear all filters
TI-2023-00508 CVE-2023-0537 · GHSA-jm69-cr4c-f9mw

Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS

Priority MEDIUM 58

The Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could al…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00503 Published 2023-05-08 No fix listed
TI-2022-04230 CVE-2022-4629 · GHSA-fwvr-9p5x-hhjw

Product Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in Shortcode

Priority MEDIUM 58

The Product Slider for WooCommerce WordPress plugin before 2.6.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contri…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-23 Fixed in 2.6.4
TI-2022-02198 CVE-2022-2382 · GHSA-5jjv-j2gc-w825

Product Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options Deletion

Priority LOW 20

The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00371 Published 2022-08-22 Fixed in 2.5.7 CWE-352