Skip to content
OpenAdvisories

Vendor

spicethemes

11 known vulnerabilities.

Products

NewsBlogger 3 Newscrunch 2 Spice Starter Sites 2 Spice Blocks 2 Carousel, Recent Post Slider and Banner Slider 1 SpicePress 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-8430

    Spice Starter Sites <= 1.2.5 - Missing Authorization to Unauthenticated Demo Content Import

    The Spice Starter Sites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the spice_starter_sites_importer_creater function in all versions up to, and including, 1.2.5. This makes it possible for unau…

    spicethemes Spice Starter Sites Web / CMS
  • Medium 6.4
    CVE-2023-5362

    Carousel, Recent Post Slider and Banner Slider <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Carousel, Recent Post Slider and Banner Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'spice_post_slider' shortcode in versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user sup…

    spicethemes Carousel, Recent Post Slider and Banner Slider Web / CMS