Averta

49 results · Clear filters · Feed

• Medium 6.5
  CVE-2024-32580

  WordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider allows Stored XSS.This issue affects Master Slider: from n/a through 3.9.8.

  Averta Master Slider
  Apr 18, 2024
• Medium 6.4
  CVE-2024-1357

  Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode

  The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_timeline shortcode in all versions up to, and including, 2.15.7 due to insufficient input sanitization and output escaping…

  Averta Shortcodes and extra features for Phlox theme Web / CMS
  Apr 16, 2024
• Medium 6.4
  CVE-2024-31099

  WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability

  Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7.

  Averta Shortcodes and extra features for Phlox theme
  Apr 1, 2024
• Medium 5.4
  CVE-2023-51491

  WordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability

  Cross-Site Request Forgery (CSRF) vulnerability in Averta Depicter Slider.This issue affects Depicter Slider: from n/a through 2.0.6.

  Averta Depicter Slider
  Mar 16, 2024
• Medium 6.4
  CVE-2024-1449

  Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

  The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_slide shortcode in all versions up to, and including, 3.9.10 due to insufficient input sanitization and output escaping on the 's…

  Averta Master Slider – Responsive Touch Slider Web / CMS
  Mar 2, 2024
• Medium 4.4
  CVE-2024-0611

  Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback

  The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slides callback functionality in all versions up to, and including, 3.9.9. This makes it possible for authenticated attackers, with editor-le…

  Averta Master Slider – Responsive Touch Slider Web / CMS
  Mar 2, 2024
• Medium 5.4
  CVE-2023-6326

  Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action

  The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.9.10. This is due to missing or incorrect nonce validation on the 'process_bulk_action' function. This makes i…

  Averta Master Slider – Responsive Touch Slider Web / CMS
  Mar 2, 2024
• Medium 4.3
  CVE-2023-6493

  Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via save

  The Depicter Slider – Responsive Image Slider, Video Slider & Post Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or incorrect nonce validation on the 'save' function…

  Averta Depicter — Popup & Slider Builder Web / CMS
  Jan 5, 2024
• Medium 6.5
  CVE-2023-50368

  WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS)

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Shortcodes and extra features for Phlox theme allows Stored XSS.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.1…

  Averta Shortcodes and extra features for Phlox theme
  Dec 14, 2023