Extension WordPress
Vulnérabilités Thumbnail carousel slider
Cette page rassemble les failles publiées pour Thumbnail carousel slider, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Thumbnail carousel slider
6 fiches
Thumbnail carousel slider <= 1.0.4 – Authenticated (Admin+) SQL Injection
The Thumbnail carousel slider plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation…
*-1.0.4
1.0.5
14/03/2025
Thumbnail carousel slider <= 1.0 – Cross-Site Request Forgery to Mass Slider Deletion
The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the deleteselected function. This makes it possible for unauthenticated attackers to delete sliders in…
1.0
1.0.1
26/10/2023
Thumbnail carousel slider <= 1.1.9 – Reflected Cross-Site Scripting
The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary…
[*, 1.1.10)
1.1.10
18/04/2023
Thumbnail carousel slider <= 1.1.9 – Reflected Cross-Site Scripting
The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-1.1.9
1.1.10
17/04/2023
Thumbnail carousel slider < 1.0.1 – Stored Cross-Site Scripting and Cross-Site Request Forgery
The Thumbnail carousel slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting and Cross-Site Request Forgery via the ‘title’ parameter in versions before 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for…
[*, 1.0.1)
1.0.1
28/12/2020
Responsive Thumbnail Slider < 1.0.1 – Authenticated (Subscriber+) Arbitrary File Upload
The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploader in versions up to 1.0.1. This makes it possible for authenticated attackers, with…
[*, 1.0.1)
1.0.1
29/08/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.