Recent Posts Slider Vulnerabilities

[en] Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Neha Goel Recent Posts Slider plugin <= 1.1 versions.

Affected:

up to 1.1

Fix:

No patched version reported

Disclosed:

Jul 25, 2023

CVE-2023-35043 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Neha Goel Recent Posts Slider plugin <= 1.1 versions.

Affected:

up to 1.1

Fix:

No patched version reported

Disclosed:

Jul 11, 2023

CVE-2023-35778 on NVD →

The Recent Posts Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to perform unauthorized actions via a forged request granted they can trick a site ad...

CVSS:

4.3

Affected:

up to 1.1

Fix:

No patched version reported

Disclosed:

Jun 16, 2023

CVE-2023-35778 on NVD →

The Recent Posts Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via a URL in versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute wheneve...

CVSS:

6.1

Affected:

up to 1.1

Fix:

No patched version reported

Disclosed:

Jun 13, 2023

CVE-2023-35043 on NVD →