wpslideshow vulnerabilities

Products

• image news slider 1
• powerplay gallery 1

Latest wpslideshow CVEs

Newest publication first

1. CVE-2015-5681 Powerplay Gallery <= 3.3 - Arbitrary File Upload

   Published 2015-08-18

   High·CVSS 7.5

   Unrestricted file upload vulnerability in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in *_uploadfolder/big/.

2. CVE-2012-4327 Image News Slider <= 3.2 - Unspecified Vulnerability

   Published 2012-08-14

   High·CVSS 7.5

   Unspecified vulnerability in the Image News slider plugin before 3.3 for WordPress has unspecified impact and remote attack vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.