Skip to content
OpenAdvisories

Vendor

Gopiplus

30 known vulnerabilities.

Products

Image horizontal reel scroll slideshow 3 Message ticker 2 Horizontal scrolling announcement 2 Wp photo text slider 50 2 Card flip image slideshow 1 Cool fade popup 1 Vertical scroll image slideshow gallery 1 Superb slideshow gallery 1 Pixelating image slideshow gallery 1 Woo superb slideshow transition gallery with random effect 1 Post title marquee scroll 1 Owl carousel responsive 1 iFrame Images Gallery 1 Left right image slideshow gallery 1 Image vertical reel scroll slideshow 1 Horizontal scrolling announcements 1 wp image slideshow 1 Vertical scroll slideshow gallery v2 1 Up down image slideshow gallery 1 Information Reel 1 drop in image slideshow gallery 1 WP fade in text news 1 New Simple Gallery 1 Twitter real time search scrolling 1 Horizontal scroll image slideshow 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-9199

    Woo superb slideshow transition gallery with random effect <= 9.1 - Authenticated (Contributor+) SQL Injection

    The Woo superb slideshow transition gallery with random effect plugin for WordPress is vulnerable to SQL Injection via the 'woo-superb-slideshow' shortcode in all versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter a…

    Gopiplus Woo superb slideshow transition gallery with random effect Web / CMS
  • Medium 6.4
    CVE-2025-5752

    Vertical scroll image slideshow gallery <= 11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter

    The Vertical scroll image slideshow gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 11.1 due to insufficient input sanitization and output escaping. This makes it possib…

    Gopiplus Vertical scroll image slideshow gallery Web / CMS
  • Medium 6.5
    CVE-2025-30983

    WordPress Card flip image slideshow plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Card flip image slideshow card-flip-image-slideshow allows DOM-Based XSS.This issue affects Card flip image slideshow: from n/a through <= 1.5.

    Gopiplus Card flip image slideshow
  • Medium 5.9
    CVE-2025-30533

    WordPress Message ticker plugin <= 9.3 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Message ticker message-ticker allows Stored XSS.This issue affects Message ticker: from n/a through <= 9.3.

    Gopiplus Message ticker
  • Medium 6.4
    CVE-2024-11884

    Wp photo text slider 50 <= 8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Wp photo text slider 50 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp-photo-slider' shortcode in all versions up to, and including, 8.1 due to insufficient input sanitization and output escaping on user supplied at…

    Gopiplus Wp photo text slider 50 Web / CMS
  • Medium 6.4
    CVE-2024-11442

    Horizontal scroll image slideshow <= 10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Horizontal scroll image slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'horizontal-scroll-image-slideshow' shortcode in all versions up to, and including, 10.1 due to insufficient input sanitization and output…

    Gopiplus Horizontal scroll image slideshow Web / CMS
  • Medium 5.9
    CVE-2024-52492

    WordPress Image horizontal reel scroll slideshow plugin <= 13.4 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Image horizontal reel scroll slideshow image-horizontal-reel-scroll-slideshow allows Stored XSS.This issue affects Image horizontal reel scroll slid…

    Gopiplus Image horizontal reel scroll slideshow
  • Medium 6.5
    CVE-2024-51914

    WordPress drop in image slideshow gallery plugin <= 12.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus drop in image slideshow gallery drop-in-image-slideshow-gallery allows DOM-Based XSS.This issue affects drop in image slideshow gallery: from n/a th…

    Gopiplus drop in image slideshow gallery
  • Medium 6.4
    CVE-2023-5413

    Image horizontal reel scroll slideshow <= 13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'ihrss-gallery' shortcode in versions up to, and including, 13.3 due to insufficient input sanitization and output escaping on user supplied attri…

    Gopiplus Image horizontal reel scroll slideshow Web / CMS
  • Medium 6.4
    CVE-2023-5001

    Horizontal scrolling announcement <= 9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Horizontal scrolling announcement plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'horizontal-scrolling' shortcode in versions up to, and including, 9.2 due to insufficient input sanitization and output escaping on user supplied attr…

    Gopiplus Horizontal scrolling announcement Web / CMS