magic hills vulnerabilities

Products

• Wonder Slider Lite 1
• wonderplugin audio player 1

Latest magic hills CVEs

Newest publication first

1. CVE-2024-24877 WordPress Wonder Slider Lite Plugin <= 13.9 is vulnerable to Cross Site Scripting (XSS)

   Published 2024-02-08

   Medium·CVSS 6.1 EPSS 0.33%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magic Hills Pty Ltd Wonder Slider Lite allows Reflected XSS.This issue affects Wonder Slider Lite: from n/a through 13.9.

2. CVE-2015-2218 WonderPlugin Audio Player < 2.1 - Multiple Cross-Site Scripting

   Published 2015-03-05

   Medium·CVSS 4.3 EPSS 4.2% Public exploit

   Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderpluginaudio.php in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) item[name] or (2) item[customc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.