Vulnerabilities

TI-2022-11909 CVE-2022-29439 · GHSA-f58f-3rr4-4p93

WordPress Image Slider by NextCode plugin <= 1.1.2 - Slider Deletion via Cross-Site Request Forgery (CSRF) vulnerability

LOW 25

Cross-Site Request Forgery (CSRF) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress allows deleting slides.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00421 Published 2022-06-15 No fix listed CWE-352

TI-2022-11908 CVE-2022-29438 · GHSA-h8rg-gc78-6ppm

WordPress Image Slider by NextCode plugin <= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

LOW 23

Authenticated (author or higher user role) Persistent Cross-Site Scripting (XSS) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00562 Published 2022-06-15 No fix listed CWE-79

TI-2022-11907 CVE-2022-29437 · GHSA-6jw7-vvcv-gjq3

WordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

LOW 38

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Image Slider by NextCode plugin <= 1.1.2 at WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00435 Published 2022-06-15 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Image Slider by NextCode plugin <= 1.1.2 - Slider Deletion via Cross-Site Request Forgery (CSRF) vulnerability

WordPress Image Slider by NextCode plugin <= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

WordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities