Log in Start free

LayerSlider

Products

ProductCVEsExploitedLatest
LayerSlider4–May 23, 2024

Exploited and recent CVEs

  • CVE-2024-4575 Medium 6.4 LayerSlider 7.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ls_search_form Shortcode 0.3%
  • CVE-2024-2879 Critical 9.8 The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to insufficient escaping on the user supplied parameter and lac 18.4%
  • CVE-2023-47786 Medium 6.5 WordPress LayerSlider Plugin <= 7.7.9 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-47785 High 7.1 WordPress LayerSlider Plugin <= 7.7.9 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%