Threat Entry Updated 2025-01-29

CVE-2023-0537 - Product Slider For Woocommerce Plugin

The Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

PLUGIN Product Slider For Woocommerce

CVE-2023-0537

MEDIUM CVSS 5.4 2023-05-08

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-03-21

CVE-2023-0166 - Product Slider For Woocommerce Plugin

The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

PLUGIN Product Slider For Woocommerce

CVE-2023-0166

MEDIUM CVSS 5.4 2023-02-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2022-2382 - Product Slider For Woocommerce Plugin

The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them. One in particular could allow them to delete arbitrary blog options.

PLUGIN Product Slider For Woocommerce

CVE-2022-2382

MEDIUM CVSS 4.3 2022-08-22

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2021-24300 - Product Slider For Woocommerce Plugin

The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue

PLUGIN Product Slider For Woocommerce

CVE-2021-24300

MEDIUM CVSS 6.1 2021-05-24

Risk Score

Open Full Technical Breakdown