gopi_plus
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Fancy Image Show | 1 | – | May 12, 2026 |
| Image Slider With Description | 1 | – | Jun 27, 2025 |
| Jquery accordion slideshow | 1 | – | Oct 31, 2023 |
| Wp anything slider | 1 | – | Nov 22, 2023 |
| Wp cycle text announcement | 1 | – | Oct 3, 2025 |
Exploited and recent CVEs
- CVE-2026-5340 Fancy Image Show <= 9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
- CVE-2025-9198 Wp cycle text announcement <= 8.1 - Authenticated (Contributor+) SQL Injection 0.4%
- CVE-2025-53308 WordPress Image Slider With Description plugin <= 9.2 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
- CVE-2023-5466 Wp anything slider <= 9.1 - Authenticated (Subscriber+) SQL Injection via Shortcode 1.0%
- CVE-2023-5464 Jquery accordion slideshow <= 8.1 - Authenticated (Subscriber+) SQL Injection via Shortcode 1.0%