Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: shapedplugin Component: Wp Carousel Clear all filters
TI-2024-02757 CVE-2024-2949 · GHSA-xg42-vmfr-25f3

Cross-site scripting in shapedplugin Carousel, Slider, Photo Gallery with Lightbox, Video…

Priority LOW 28

The Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00344 Published 2024-04-06 No fix listed CWE-79