CVE-2024-34443

Description

References

• patchstack.com/articles/unauthenticated-xss-vulnerability-patched-in-slider-revolution-plugin · Third Party Advisory
• patchstack.com/database/vulnerability/revslider/wordpress-slider-revolution-plugin-6-7-11-cross-site-scripting-xss-vulnerability · Third Party Advisory

More vulnerabilities in slider revolution

• CVE-2024-8107MEDIUM 5.4The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and incl…
• CVE-2024-37449MEDIUM 4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemePunch OHG Slider Revolutio…
• CVE-2024-34444HIGH 8.8Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0.
• CVE-2024-4637MEDIUM 5.4The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.7.10 due to …
• CVE-2024-4581MEDIUM 5.4The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Add Layer widget in all versions up…