Vulnerabilities

TI-2025-13485 CVE-2025-14770 · GHSA-295q-9vrj-rf67

Shipping Rate By Cities <= 2.0.0 - Unauthenticated SQL Injection via 'city' Parameter

LOW 39

The Shipping Rate By Cities plugin for WordPress is vulnerable to SQL Injection via the 'city' parameter in all versions up to, and including, 2.0.0 due to insufficient escaping on the user supplied parameter and lack of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00324 Published 2026-01-14 No fix listed CWE-89

TI-2023-13142 CVE-2023-28622 · GHSA-fj48-q2vr-9jpj

WordPress Easy Slider Revolution Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

LOW 26

Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in Trident Technolabs Easy Slider Revolution plugin <= 1.0.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00358 Published 2023-08-17 No fix listed CWE-79

Vulnerabilities

Filters

Shipping Rate By Cities <= 2.0.0 - Unauthenticated SQL Injection via 'city' Parameter

WordPress Easy Slider Revolution Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)