Approved changes feed: RSS · Atom

cpe:2.3:a:tribulant:slideshow_gallery:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorTribulant (bf1244fc-c4c3-5645-87d8-d8f318ca0cbd)
ProductSlideshow Gallery (f546f08b-fa0c-5045-8071-3a4b2d4100cd)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-31354 vulnerable 2026-06-08 06:35:31.355258 WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8.
Published: 2024-04-12T12:24:45.788Z
Updated: 2026-04-28T16:09:31.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31353 vulnerable 2026-06-08 06:35:31.353776 WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8.
Published: 2024-04-10T15:30:53.721Z
Updated: 2026-04-28T16:09:31.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28497 vulnerable 2026-06-08 06:01:10.987882 WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery LITE plugin <= 1.7.6 versions.
Published: 2023-11-12T22:01:56.040Z
Updated: 2026-04-28T16:08:16.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28491 vulnerable 2026-06-08 06:01:10.978460 WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection
MEDIUM (6.7)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery LITE.This issue affects Slideshow Gallery LITE: from n/a through 1.7.6.
Published: 2023-12-20T17:23:19.842Z
Updated: 2026-04-28T16:08:15.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24882 vulnerable 2026-06-08 05:30:39.554704 Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site Scripting
The Slideshow Gallery WordPress plugin before 1.7.4 does not sanitise and escape the Slide "Title", "Description", and Gallery "Title" fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
Published: 2021-11-23T19:16:19.000Z
Updated: 2024-08-03T19:49:13.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17946 vulnerable 2026-06-08 05:11:07.006067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.