Skip to content
OpenAdvisories

Vendor

ryscript

4 known vulnerabilities.

Products

NV Slider 2 WP App Bar 1 WP Panoramio 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-1074

    WP App Bar <= 1.5 - Unauthenticated Stored Cross-Site Scripting via 'app-bar-features' Parameter

    The WP App Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'app-bar-features' parameter in all versions up to, and including, 1.5. This is due to insufficient input sanitization and output escaping combined with a missing authori…

    ryscript WP App Bar Web / CMS
  • High 7.1
    CVE-2025-23661

    WordPress NV Slider plugin <= 1.6 - CSRF to Stored Cross-Site Scripting vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ryscript NV Slider nv-slider allows Stored XSS.This issue affects NV Slider: from n/a through <= 1.6.

    ryscript NV Slider
  • High 7.1
    CVE-2025-23662

    WordPress WP Panoramio plugin <= 1.5.0 - CSRF to Cross-Site Scripting vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ryscript WP Panoramio wp-panoramio allows Stored XSS.This issue affects WP Panoramio: from n/a through <= 1.5.0.

    ryscript WP Panoramio