Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: bqworks Clear all filters
TI-2025-40617 CVE-2025-66092 · GHSA-78x5-c3xr-96fc

WordPress Accordion Slider plugin <= 1.9.13 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bqworks Accordion Slider accordion-slider allows Stored XSS.This issue affects Accordion Slider: from n/a through <= 1…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-11-21 No fix listed CWE-79
TI-2024-11033 CVE-2024-11892 · GHSA-7q45-h7jh-fpjj

Accordion Slider Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Accordion Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'accordion_slider' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00347 Published 2025-01-11 No fix listed CWE-79
TI-2024-11017 CVE-2024-11874 · GHSA-m9cf-rg66-wjf3

Grid Accordion Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Grid Accordion Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'grid_accordion' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00334 Published 2025-01-11 No fix listed CWE-79
TI-2024-11040 CVE-2024-11899 · GHSA-jf76-w4vp-r5jp

Slider Pro Lite <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Slider Pro Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sliderpro' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00346 Published 2025-01-07 No fix listed CWE-79
TI-2023-22258 CVE-2023-41865 · GHSA-w46h-pcjm-w7gc

WordPress Slider Pro plugin <= 4.8.6 - Broken Access Control vulnerability

Priority LOW 21

Missing Authorization vulnerability in bqworks Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Pro: from n/a through 4.8.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00484 Published 2024-12-13 No fix listed CWE-862
TI-2023-21160 CVE-2023-40331 · GHSA-89p6-5p4m-h2pv

WordPress Accordion Slider plugin <= 1.9.6 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in bqworks Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion Slider: from n/a through 1.9.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0047 Published 2024-12-13 No fix listed CWE-862
TI-2024-04662 CVE-2024-5020 · GHSA-54pv-xj9x-h8qj

Cross-site scripting in extendthemes Colibri Page Builder

Priority LOW 29

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in various versions due to insufficient input sanitization and o…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00433 Published 2024-12-04 No fix listed CWE-79
TI-2024-08889 CVE-2024-9582 · GHSA-pf65-pxf7-f5gv

Accordion Slider <= 1.9.11 - Authenticted (Contributor+) Stored Cross-Site Scripting via HTML Attribute

Priority LOW 28

The Accordion Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘html’ attribute of an accordion slider in all versions up to, and including, 1.9.11 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00274 Published 2024-10-16 No fix listed CWE-79