IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
6.1Orta

CVE-2024-6026Slider by 10Web < 1.2.56 - Editor+ Stored XSS

Slider by 10Web; 10web slider Yayım: (2 yıl önce)

Açıklama

The Slider by 10Web WordPress plugin before 1.2.56 does not sanitise and escape some of its Slide options, which could allow authenticated users with access to the Sliders (by default Administrator, however this can be changed via the Slider by 10Web WordPress plugin before 1.2.56's options) and the ability to add images (Editor+) to perform Stored Cross-Site Scripting attacks

Zayıflık türü (CWE): CWE-79

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
10web slider < 1.2.56
— Slider by 10Web < 1.2.56

Kaynaklar ve yamalar

Aynı üründe son açıklar — WordPress plugins & themes

Puansız
CVE-2026-127048

Lazy Blocks < 3.0.0 - Unauthenticated RCE

Custom Block Builder

The Custom Block Builder WordPress plugin before 3.0.0 does not properly deny unauthorised requests to its REST routes, as its permission checks return a non-error response that WordPress treats as granted, allowing unauthenticated users to execute arbitrary…