Log in Start free

nik00726

Products

ProductCVEsExploitedLatest
Thumbnail Slider With Lightbox3–Oct 27, 2023
Photo Gallery Slideshow & Masonry Tiled Gallery2–Jan 3, 2025
Responsive Filterable Portfolio2–Sep 10, 2025
Email Subscription Popup2–Nov 19, 2024
Thumbnail carousel slider2–Oct 27, 2023
video carousel slider with lightbox2–Nov 3, 2023
Responsive Thumbnail Slider1–Aug 1, 2026
Vertical Image Slider1–Jun 9, 2023
WP Responsive Tabs horizontal vertical and accordion Tabs1–Jun 9, 2023
Video Gallery1–May 16, 2023
Team Circle Image Slider With Lightbox1–Jun 9, 2023
Video Grid1–Oct 16, 2024

Exploited and recent CVEs

  • CVE-2026-18344 Medium 6.1 Responsive Thumbnail Slider < 1.1.53 - Reflected Cross-Site Scripting via 'id' Parameter 0.4%
  • CVE-2025-10049 High 7.2 Responsive Filterable Portfolio <= 1.0.24 - Authenticated (Admin+) Arbitrary File Upload 0.6%
  • CVE-2024-12237 Medium 4.3 Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.15 - Authenticated (Subscriber+) Limited Server-Side Request Forgery 0.4%
  • CVE-2024-11195 Medium 6.4 Email Subscription Popup <= 1.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcode 0.4%
  • CVE-2023-7295 Medium 6.1 Video Grid <= 1.21 - Reflected Cross-Site Scripting 0.3%
  • CVE-2023-6527 Medium 6.1 Email Subscription Popup <= 1.2.18 - Reflected Cross-Site Scripting 0.4%
  • CVE-2023-5945 Medium 4.3 The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the responsive_video_ga 0.4%
  • CVE-2023-5820 Critical 9.6 The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the addedit functionality. T 0.4%
  • CVE-2023-5821 Medium 4.3 The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the deleteselected function. This makes it pos 0.3%
  • CVE-2023-5621 Medium 4.4 Thumbnail Slider With Lightbox <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Image Title 0.5%
  • CVE-2023-5531 Medium 4.3 Thumbnail Slider With Lightbox <= 1.0 - Cross-Site Request Forgery 0.3%
  • CVE-2023-2184 Medium 6.1 WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting 0.4%
  • CVE-2023-2289 Medium 6.1 wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting 0.4%
  • CVE-2023-2402 Medium 6.1 Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.13 - Reflected Cross-Site Scripting 0.4%
  • CVE-2023-2604 Medium 6.1 Team Circle Image Slider With Lightbox <= 1.0.17 - Reflected Cross-Site Scripting 0.4%
  • CVE-2023-2710 Medium 6.1 video carousel slider with lightbox <= 1.0.22 - Reflected Cross-Site Scripting 0.6%
  • CVE-2023-2708 Medium 6.1 Video Gallery <= 1.0.10 - Reflected Cross-Site Scripting 0.6%
  • CVE-2023-2120 Medium 6.1 Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting 0.6%
  • CVE-2023-2119 Medium 6.1 Responsive Filterable Portfolio <= 1.0.19 - Reflected Cross-Site Scripting 0.6%