Skip to content
OpenAdvisories

Vendor

wpdecent

1 known vulnerabilities.

Products

Flexi Product Slider and Grid for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-1988

    Flexi Product Slider and Grid for WooCommerce <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion via 'theme' Shortcode Attribute

    The Flexi Product Slider and Grid for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0.5 via the `flexipsg_carousel` shortcode. This is due to the `theme` parameter being directly concatenated in…

    wpdecent Flexi Product Slider and Grid for WooCommerce Web / CMS