Vendor/product archive

infornweb / logo_showcase_with_slick_slider CVEs

Beta · best-effort

3 CVEs tagged to infornweb / logo_showcase_with_slick_slider — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to infornweb vendor archive

CVE-2021-24913

Published Feb 28, 2022

The Logo Showcase with Slick Slider WordPress plugin before 2.0.1 does not have CSRF check in the lswss_save_attachment_data AJAX action, allowing attackers to make a logged in hi…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-24730

Published Feb 28, 2022

The Logo Showcase with Slick Slider WordPress plugin before 1.2.5 does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authentic…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-24729

Published Nov 23, 2021

The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1