CVE-2021-24132: falha em Slider by 10Web
Slider by 10Web < 1.2.36 - Multiple Authenticated SQL Injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.6%
The Slider by 10Web WordPress plugin, versions before 1.2.36, in the bulk_action, export_full and save_slider_db functionalities of the plugin were vulnerable, allowing a high privileged user (Admin), or medium one such as Contributor+ (if "Role Options" is turn on for other users) to perform a SQL Injection attacks.
Produtos afetados
Unknown · Slider by 10WebCVEs relacionadas — Slider by 10Web
No mesmo produto, das mais perigosas para as menos.
CVE-2024-8283MEDIUMSlider by 10Web < 1.2.59 - Admin+ Stored XSSEPSS 0.4%CVE-2024-6408MEDIUMSlider by 10Web < 1.2.57 - Editor+ Stored XSSEPSS 0.4%CVE-2024-6026MEDIUMSlider by 10Web < 1.2.56 - Editor+ Stored XSSEPSS 0.4%CVE-2024-10566MEDIUMSlider by 10Web < 1.2.62 - Contributor+ Stored XSSEPSS 0.3%CVE-2024-10565MEDIUMSlider by 10Web < 1.2.62 - Admin+ Stored XSS via WidgetEPSS 0.3%