Vulnerabilities

TI-2025-16464 CVE-2025-22578 · GHSA-47h7-p64f-fpwm

WordPress WP Cookie plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aazztech WP Cookie wp-cookie allows Stored XSS.This issue affects WP Cookie: from n/a through <= 1.0.0.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00299 Published 2025-01-07 No fix listed CWE-79

TI-2022-19516 CVE-2022-40975 · GHSA-5m8f-c344-mvcv

WordPress Post Slider plugin <= 1.6.7 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in Aazztech Post Slider.This issue affects Post Slider: from n/a through 1.6.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00464 Published 2024-04-26 No fix listed CWE-862

TI-2023-25865 CVE-2023-47755 · GHSA-39c7-q63f-4f47

WordPress WooCommerce Product Carousel Slider Plugin <= 3.3.5 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AazzTech WooCommerce Product Carousel Slider plugin <= 3.3.5 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0039 Published 2023-11-22 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WP Cookie plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

WordPress Post Slider plugin <= 1.6.7 - Broken Access Control vulnerability

WordPress WooCommerce Product Carousel Slider Plugin <= 3.3.5 is vulnerable to Cross Site Scripting (XSS)