plugin
7 known security issues reported for the 360 Product Rotation WordPress plugin. Most recent disclosed May 15, 2025.
Running 360 Product Rotation on your site? Check whether your installed version is affected.
Scan your site free[en] The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users.
The 360 Product Rotation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.5.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can suc...
[en] The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.
Reflected Cross-Site Scripting (XSS) vulnerability found by ImplosionSec in WordPress 360 Product Rotation plugin (versions <= 1.4.7).
The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.
The 360 Product Rotation plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ~/includes/plugin-media-upload.php file in versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server wh...
The 360 Product Rotation plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ~/includes/plugin-media-upload.php file in versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server wh...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free