Vulnerabilities

TI-2024-20725 CVE-2024-31353 · GHSA-68qv-4jc5-hr7h

WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability

LOW 30

Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0047 Published 2024-04-10 No fix listed CWE-532

TI-2023-13031 CVE-2023-28491 · GHSA-2jv7-9rj6-jp68

WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery LITE.This issue affects Slideshow Gallery LITE: from n/a through 1.7.6.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00762 Published 2023-12-20 No fix listed CWE-89

TI-2023-13037 CVE-2023-28497 · GHSA-m64r-535p-69jq

WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery LITE plugin <= 1.7.6 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00284 Published 2023-11-12 No fix listed CWE-352

TI-2021-07164 CVE-2021-24882 · GHSA-j64v-v3q7-95h7

Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site Scripting

LOW 23

The Slideshow Gallery WordPress plugin before 1.7.4 does not sanitise and escape the Slide "Title", "Description", and Gallery "Title" fields, which could allow high privilege users to perform Cross-Site Scripting attack…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-11-23 Fixed in 1.7.4 CWE-79

TI-2018-12823 CVE-2018-18019 · GHSA-64r4-wv53-jp79

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the…

LOW 29

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slide[title], Slide[media_file], or Slide[image_url] parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01021 Published 2019-04-15 No fix listed CWE-79

TI-2018-12822 CVE-2018-18018 · GHSA-xprq-8xww-262w

SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via…

MEDIUM 46

SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02193 Published 2019-04-15 No fix listed CWE-89

TI-2018-12821 CVE-2018-18017 · GHSA-82m7-g45g-4r5w

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the…

LOW 29

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01021 Published 2019-04-15 No fix listed CWE-79

TI-2018-12773 CVE-2018-17946 · GHSA-g8v3-4x27-wjh3

The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id…

LOW 29

The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00844 Published 2018-10-03 No fix listed CWE-79

Vulnerabilities

Filters