Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: aumsrini Clear all filters
TI-2026-01552 CVE-2026-1885 · GHSA-4m3p-4qg3-gvrj

Cross-site scripting in aumsrini Slideshow Wp

Priority LOW 28

The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'sswp-slide' shortcode in all versions up to, and including, 1.1.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00267 Published 2026-02-11 No fix listed CWE-79
TI-2025-07687 CVE-2025-8400 · GHSA-wqwr-pr9c-fc8f

Image Gallery <= 1.0.0 - Reflected Cross-Site Scripting

Priority LOW 27

The Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00298 Published 2025-08-02 No fix listed CWE-79
TI-2025-20822 CVE-2025-28879 · GHSA-hxm7-743q-rcrf

WordPress Bee Layer Slider plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aumsrini Bee Layer Slider bee-layer-slider allows Stored XSS.This issue affects Bee Layer Slider: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00273 Published 2025-03-11 No fix listed CWE-79