2j-slideshow vulnerabilities

Products

• Slideshow, Image Slider by 2J 2

Latest 2j-slideshow CVEs

Newest publication first

1. CVE-2023-4604 Slideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting via 'post'

   Published 2024-08-17

   Medium·CVSS 6.1 EPSS 0.33%

   The Slideshow, Image Slider by 2J plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘post’ parameter in versions up to, and including, 1.3.54 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

2. CVE-2020-36729 Slideshow, Image Slider by 2J <= 1.3.31 - Authorization Bypass

   Published 2023-06-07

   Medium·CVSS 4.3 EPSS 0.72%

   The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'twoj_slideshow_setup' function called via the wp_ajax_twoj_slideshow_setup AJAX action in versions up to, and including, 1.3.31. This makes it possible for authen...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.