aumsrini
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Bee Layer Slider | 1 | – | Mar 11, 2025 |
| Image Gallery | 1 | – | Aug 2, 2025 |
| Slideshow Wp | 1 | – | Feb 11, 2026 |
| WordPress Content Flipper | 1 | – | Nov 13, 2025 |
Exploited and recent CVEs
- CVE-2026-1885 Slideshow Wp <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sswp-slide' Shortcode 'sswpid' Attribute 0.3%
- CVE-2025-11769 WordPress Content Flipper <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2025-8400 Image Gallery <= 1.0.0 - Reflected Cross-Site Scripting 0.3%
- CVE-2025-28879 WordPress Bee Layer Slider plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability 0.3%