Skip to content
OpenAdvisories

Vendor

logichunt

7 known vulnerabilities.

Products

Logo Slider WP – Responsive Logo Carousel, Logo Gallery & Logo Showcase 2 Logo Slider 1 OWL Carousel – WordPress Owl Carousel Slider 1 Portfolio – Filterable Masonry Portfolio Gallery for Professionals 1 Counter Up 1 Counter Up – Animated Number Counter & Milestone Showcase 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-13247 Public exploit

    Logo Slider <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lgx_tooltip_position' Parameter

    The Logo Slider – Logo Carousel, Client Logo Slider & Brand Showcase for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lgx_tooltip_position' parameter in all versions up to, and including, 5.5 due to insufficient input s…

    logichunt Logo Slider WP – Responsive Logo Carousel, Logo Gallery & Logo Showcase Web / CMS
  • Medium 6.4
    CVE-2026-0609

    Logo Slider <= 4.9.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'logo-slider' Shortcode

    The Logo Slider – Logo Carousel, Logo Showcase & Client Logo Slider Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image alt text in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output e…

    logichunt Logo Slider WP – Responsive Logo Carousel, Logo Gallery & Logo Showcase Web / CMS
  • Medium 5.9
    CVE-2026-24626

    WordPress Logo Slider plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through <= 5.1.1.

    logichunt Logo Slider
  • Medium 6.4
    CVE-2024-11900

    Portfolio – Filterable Masonry Portfolio Gallery for Professionals <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Portfolio – Filterable Masonry Portfolio Gallery for Professionals plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'portfolio-pro' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitizat…

    logichunt Portfolio – Filterable Masonry Portfolio Gallery for Professionals Web / CMS
  • Medium 6.4
    CVE-2024-10895

    Counter Up – Animated Number Counter & Milestone Showcase <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Counter Up – Animated Number Counter & Milestone Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lgx-counter' shortcode in all versions up to, and including, 2.4.0 due to insufficient input sanitization and out…

    logichunt Counter Up – Animated Number Counter & Milestone Showcase Web / CMS
  • Medium 6.5
    CVE-2024-34564

    WordPress Counter Up plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt Inc. Counter Up allows Stored XSS.This issue affects Counter Up: from n/a through 2.2.1.

    logichunt Counter Up
  • Medium 6.5
    CVE-2024-24801

    WordPress OWL Carousel Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.…

    logichunt OWL Carousel – WordPress Owl Carousel Slider Web / CMS