Vulnerabilities in LayerSlider

4 results

CVE-2024-2879CRITICALThe LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to EPSS 18.4%CVE-2023-47786MEDIUMWordPress LayerSlider Plugin <= 7.7.9 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-4575MEDIUMLayerSlider 7.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ls_search_form ShortcodeEPSS 0.3%CVE-2023-47785HIGHWordPress LayerSlider Plugin <= 7.7.9 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%