Skip to content
OpenAdvisories

Vendor

comparisonslider

3 known vulnerabilities.

Products

Comparison Slider 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-4427

    Comparison Slider <= 1.0.5 - Missing Authorization

    The Comparison Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 1.0.5. This makes it possible for authenticated attackers, with subsc…

    comparisonslider Comparison Slider Web / CMS
  • Medium 4.3
    CVE-2024-4426

    Comparison Slider <= 1.0.5 - Cross-Site Request Forgery

    The Comparison Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.5. This is due to missing or incorrect nonce validation on several functions hooked to AJAX actions. This makes it possible for un…

    comparisonslider Comparison Slider Web / CMS
  • Medium 6.4
    CVE-2024-4422

    Comparison Slider <= 1.0.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    The Comparison Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slider title parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authentic…

    comparisonslider Comparison Slider Web / CMS