Skip to content
OpenAdvisories

Vendor

aumsrini

4 known vulnerabilities.

Products

Slideshow Wp 1 Image Gallery 1 Bee Layer Slider 1 WordPress Content Flipper 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-1885

    Slideshow Wp <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sswp-slide' Shortcode 'sswpid' Attribute

    The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'sswp-slide' shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping on user s…

    aumsrini Slideshow Wp Web / CMS
  • Medium 6.4
    CVE-2025-11769

    WordPress Content Flipper <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The WordPress Content Flipper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bgcolor' shortcode attribute of the 'flipper_front' shortcode in all versions up to, and including, 0.1. This is due to insufficient input sanitization an…

    aumsrini WordPress Content Flipper Web / CMS
  • Medium 6.1
    CVE-2025-8400

    Image Gallery <= 1.0.0 - Reflected Cross-Site Scripting

    The Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbit…

    aumsrini Image Gallery Web / CMS
  • Medium 6.5
    CVE-2025-28879

    WordPress Bee Layer Slider plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aumsrini Bee Layer Slider bee-layer-slider allows Stored XSS.This issue affects Bee Layer Slider: from n/a through <= 1.1.

    aumsrini Bee Layer Slider