Skip to content
OpenAdvisories

Vendor

Thiago S.F.

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.2

    Skitter Slideshow <= 2.5.2 - Unauthenticated Server-Side Request Forgery

    The Skitter Slideshow plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.2 via the /image.php file. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations origi…