Show filters
26 Total Results
Displaying 11-20 of 26
Sort by:
Attacker Value
Unknown
CVE-2024-31353
Disclosure Date: April 10, 2024 (last updated April 20, 2024)
Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8.
0
Attacker Value
Unknown
CVE-2023-4797
Disclosure Date: January 16, 2024 (last updated January 24, 2024)
The Newsletters WordPress plugin before 4.9.3 does not properly escape user-controlled parameters when they are appended to SQL queries and shell commands, which could enable an administrator to run arbitrary commands on the server.
0
Attacker Value
Unknown
CVE-2023-28491
Disclosure Date: December 20, 2023 (last updated December 28, 2023)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery LITE.This issue affects Slideshow Gallery LITE: from n/a through 1.7.6.
0
Attacker Value
Unknown
CVE-2023-28497
Disclosure Date: November 12, 2023 (last updated November 16, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery LITE plugin <= 1.7.6 versions.
0
Attacker Value
Unknown
CVE-2023-30478
Disclosure Date: November 10, 2023 (last updated November 16, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters plugin <= 4.8.8 versions.
0
Attacker Value
Unknown
CVE-2021-24882
Disclosure Date: November 23, 2021 (last updated February 23, 2025)
The Slideshow Gallery WordPress plugin before 1.7.4 does not sanitise and escape the Slide "Title", "Description", and Gallery "Title" fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
0
Attacker Value
Unknown
CVE-2020-35932
Disclosure Date: January 01, 2021 (last updated February 22, 2025)
Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers) to use the tpnc_render AJAX action to inject arbitrary PHP objects via the options[inline_edits] parameter. NOTE: exploitability depends on PHP objects that might be present with certain other plugins or themes.
0
Attacker Value
Unknown
CVE-2019-15828
Disclosure Date: August 30, 2019 (last updated November 27, 2024)
The one-click-ssl plugin before 1.4.7 for WordPress has CSRF.
0
Attacker Value
Unknown
CVE-2018-20987
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.
0
Attacker Value
Unknown
CVE-2019-14788
Disclosure Date: August 15, 2019 (last updated November 27, 2024)
wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resultant remote PHP code execution via the subscribers[1][1] parameter in conjunction with an exportfile=../ value.
0
