Vendor CVEs

Nik00726

All CVEs

24 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-30497	Nik00726 Wp Responsive Tabs	Hig	0.55	8.5	0.01	Mar 29, 2024	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through…
CVE-2024-27960	Nik00726 Email Subscription Popup	Hig	0.46	7.1	0.00	Mar 17, 2024	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Email Subscription Popup allows Stored XSS.This issue affects Email Subscription Popup: from n/a through 1.2.20.
CVE-2024-13387	WordPress Wp Responsive Tabs	Med	0.42	6.4	0.00	Jan 16, 2025	The WP Responsive Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprtabs' shortcode in all versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
CVE-2023-6527	WordPress Email Subscription Popup	Med	0.40	6.1	0.00	Dec 6, 2023	The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER header in all versions up to, and including, 1.2.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
CVE-2023-2604	WordPress Circle Image Slider With Lightbox	Med	0.40	6.1	0.00	Jun 9, 2023	The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.0.17 due to insufficient input sanitization and output escaping. This makes it possible for…
CVE-2023-2402	WordPress Photo Gallery Slideshow & Masonry Tiled Gallery	Med	0.40	6.1	0.00	Jun 9, 2023	The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.13 due to insufficient input sanitization and output escaping. This makes it possible for…
CVE-2023-2289	WordPress vertical image slider	Med	0.40	6.1	0.00	Jun 9, 2023	The wordpress vertical image slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.2.16 due to insufficient input sanitization and output escaping. This makes it possible for…
CVE-2023-2184	Nik00726 Wp Responsive Tabs	Med	0.40	6.1	0.00	Jun 9, 2023	The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.1.15 due to insufficient input sanitization and output escaping. This makes it…
CVE-2023-2710	WordPress video carousel slider with lightbox	Med	0.40	6.1	0.01	May 16, 2023	The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping. This makes it possible for…
CVE-2023-2708	WordPress Video Gallery	Med	0.40	6.1	0.01	May 16, 2023	The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
CVE-2023-2120	WordPress Thumbnail Carousel Slider	Med	0.40	6.1	0.01	Apr 18, 2023	The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
CVE-2023-2119	WordPress Responsive Filterable Portfolio	Med	0.40	6.1	0.01	Apr 18, 2023	The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
CVE-2022-0648	WordPress Circle Image Slider With Lightbox	Med	0.40	6.1	0.01	Mar 14, 2022	The Team Circle Image Slider With Lightbox WordPress plugin before 1.0.16 does not sanitize and escape the order_pos parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2025-49912	Nik00726 Email Subscription Popup	Med	0.38	5.9	0.00	Oct 22, 2025	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nks Email Subscription Popup email-subscribe allows Stored XSS.This issue affects Email Subscription Popup: from n/a through <= 1.2.26.
CVE-2023-47226	I Thirteen Web Solution Post Sliders & Post Grids	Med	0.38	5.9	0.00	Nov 8, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Post Sliders & Post Grids plugin <= 1.0.20 versions.
CVE-2023-45754	Nik00726 Easy Testimonial Slider And Form	Med	0.38	5.9	0.00	Oct 25, 2023	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form allows Stored XSS.This issue affects Easy Testimonial Slider and Form: from n/a through 1.0.18.
CVE-2024-11195	Nik00726 Email Subscription Popup	Med	0.35	6.4	0.00	Nov 19, 2024	The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_email_subscribe_form shortcode in all versions up to, and including, 1.2.22 due to insufficient input sanitization and output escaping on user supplied…
CVE-2019-25222	WordPress Thumbnail Carousel Slider	Med	0.32	4.9	0.00	Mar 15, 2025	The Thumbnail carousel slider plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…
CVE-2019-25212	Nik00726 Video Carousel Slider With Lightbox	Med	0.32	4.9	0.01	Sep 11, 2024	The video carousel slider with lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…
CVE-2023-5621	WordPress Thumbnail Slider With Lightbox	Med	0.29	4.4	0.00	Oct 18, 2023	The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Title field in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
CVE-2024-12237	WordPress Wp Responsive Photo Gallery	Med	0.28	4.3	0.00	Jan 3, 2025	The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.15 via the rjg_get_youtube_info_justified_gallery_callback function. This makes it possible for authenticated…
CVE-2023-5531	WordPress Thumbnail Slider With Lightbox	Med	0.28	4.3	0.00	Oct 12, 2023	The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the delete functionality. This makes it possible for unauthenticated attackers to…
CVE-2015-10147	Easy Testimonial Slider and Form plugin for WordPress Easy Testimonial Slider and Form plugin for WordPress		0.00	—	0.00	Oct 29, 2025	The Easy Testimonial Slider and Form plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. …
CVE-2015-10146	WordPress Thumbnail Slider With Lightbox		0.00	—	0.00	Oct 29, 2025	The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. …

CVE-2024-30497HigMar 29, 2024
Nik00726
Wp Responsive Tabs
risk 0.55cvss 8.5epss 0.01
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through…
CVE-2024-27960HigMar 17, 2024
Nik00726
Email Subscription Popup
risk 0.46cvss 7.1epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Email Subscription Popup allows Stored XSS.This issue affects Email Subscription Popup: from n/a through 1.2.20.
CVE-2024-13387MedJan 16, 2025
WordPress
Wp Responsive Tabs
risk 0.42cvss 6.4epss 0.00
The WP Responsive Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprtabs' shortcode in all versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
CVE-2023-6527MedDec 6, 2023
WordPress
Email Subscription Popup
risk 0.40cvss 6.1epss 0.00
The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER header in all versions up to, and including, 1.2.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
CVE-2023-2604MedJun 9, 2023
WordPress
Circle Image Slider With Lightbox
risk 0.40cvss 6.1epss 0.00
The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.0.17 due to insufficient input sanitization and output escaping. This makes it possible for…
CVE-2023-2402MedJun 9, 2023
WordPress
Photo Gallery Slideshow & Masonry Tiled Gallery
risk 0.40cvss 6.1epss 0.00
The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.13 due to insufficient input sanitization and output escaping. This makes it possible for…
CVE-2023-2289MedJun 9, 2023
WordPress
vertical image slider
risk 0.40cvss 6.1epss 0.00
The wordpress vertical image slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.2.16 due to insufficient input sanitization and output escaping. This makes it possible for…
CVE-2023-2184MedJun 9, 2023
Nik00726
Wp Responsive Tabs
risk 0.40cvss 6.1epss 0.00
The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.1.15 due to insufficient input sanitization and output escaping. This makes it…
CVE-2023-2710MedMay 16, 2023
WordPress
video carousel slider with lightbox
risk 0.40cvss 6.1epss 0.01
The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping. This makes it possible for…
CVE-2023-2708MedMay 16, 2023
WordPress
Video Gallery
risk 0.40cvss 6.1epss 0.01
The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
CVE-2023-2120MedApr 18, 2023
WordPress
Thumbnail Carousel Slider
risk 0.40cvss 6.1epss 0.01
The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
CVE-2023-2119MedApr 18, 2023
WordPress
Responsive Filterable Portfolio
risk 0.40cvss 6.1epss 0.01
The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
CVE-2022-0648MedMar 14, 2022
WordPress
Circle Image Slider With Lightbox
risk 0.40cvss 6.1epss 0.01
The Team Circle Image Slider With Lightbox WordPress plugin before 1.0.16 does not sanitize and escape the order_pos parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2025-49912MedOct 22, 2025
Nik00726
Email Subscription Popup
risk 0.38cvss 5.9epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nks Email Subscription Popup email-subscribe allows Stored XSS.This issue affects Email Subscription Popup: from n/a through <= 1.2.26.
CVE-2023-47226MedNov 8, 2023
I Thirteen Web Solution
Post Sliders & Post Grids
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Post Sliders & Post Grids plugin <= 1.0.20 versions.
CVE-2023-45754MedOct 25, 2023
Nik00726
Easy Testimonial Slider And Form
risk 0.38cvss 5.9epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form allows Stored XSS.This issue affects Easy Testimonial Slider and Form: from n/a through 1.0.18.
CVE-2024-11195MedNov 19, 2024
Nik00726
Email Subscription Popup
risk 0.35cvss 6.4epss 0.00
The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_email_subscribe_form shortcode in all versions up to, and including, 1.2.22 due to insufficient input sanitization and output escaping on user supplied…
CVE-2019-25222MedMar 15, 2025
WordPress
Thumbnail Carousel Slider
risk 0.32cvss 4.9epss 0.00
The Thumbnail carousel slider plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…
CVE-2019-25212MedSep 11, 2024
Nik00726
Video Carousel Slider With Lightbox
risk 0.32cvss 4.9epss 0.01
The video carousel slider with lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…
CVE-2023-5621MedOct 18, 2023
WordPress
Thumbnail Slider With Lightbox
risk 0.29cvss 4.4epss 0.00
The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Title field in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
CVE-2024-12237MedJan 3, 2025
WordPress
Wp Responsive Photo Gallery
risk 0.28cvss 4.3epss 0.00
The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.15 via the rjg_get_youtube_info_justified_gallery_callback function. This makes it possible for authenticated…
CVE-2023-5531MedOct 12, 2023
WordPress
Thumbnail Slider With Lightbox
risk 0.28cvss 4.3epss 0.00
The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the delete functionality. This makes it possible for unauthenticated attackers to…
CVE-2015-10147Oct 29, 2025
Easy Testimonial Slider and Form plugin for WordPress
Easy Testimonial Slider and Form plugin for WordPress
risk 0.00cvss —epss 0.00
The Easy Testimonial Slider and Form plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. …
CVE-2015-10146Oct 29, 2025
WordPress
Thumbnail Slider With Lightbox
risk 0.00cvss —epss 0.00
The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. …