Approved changes feed: RSS · Atom

cpe:2.3:a:heliossolutions:hs_brand_logo_slider:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHeliossolutions (f4ca4e79-9cc8-5585-8801-35ecd24402f5)
ProductHs Brand Logo Slider (03e2a0c0-6851-5e03-a9bf-9f5308a1539c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37227 vulnerable 2026-06-08 05:25:50.360336 WordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File Upload
HIGH (8.8)
HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary files. Attackers can intercept upload requests to the logoupload parameter in the admin interface and rename files to executable extensions .php to achieve remote code execution.
Published: 2026-05-16T15:25:45.310Z
Updated: 2026-07-28T01:47:15.473Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.