Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: nik00726 Component: Thumbnail Slider With Lightbox Clear all filters
TI-2015-08074 CVE-2015-10146 · GHSA-3386-f7wg-696x

Thumbnail Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection

Priority LOW 22

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and la…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00296 Published 2025-10-29 No fix listed CWE-89
TI-2023-05173 CVE-2023-5621 · GHSA-7c84-qx75-c25g

Thumbnail Slider With Lightbox <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Image Title

Priority LOW 23

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Title field in versions up to, and including, 1.0 due to insufficient input sanitization and output escap…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00482 Published 2023-10-18 No fix listed CWE-79