Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Webpsilon Clear all filters
TI-2022-01552 CVE-2022-1684 · GHSA-6p9h-frfg-cmhm

Cube Slider <= 1.2 - Admin+ SQLi

Priority LOW 15

The Cube Slider WordPress plugin through 1.2 does not sanitise and escape the idslider parameter before using it in various SQL queries, leading to SQL Injections exploitable by high privileged users such as admin

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00808 Published 2022-06-06 No fix listed CWE-89
TI-2021-06690 CVE-2021-24398 · GHSA-cppw-2fwh-6pqg

Responsive 3D Slider <= 1.2 - Authenticated SQL Injection

Priority LOW 35

The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, leading to SQL injectio…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01516 Published 2021-09-20 No fix listed CWE-89