GCVE - cpe:2.3:a:unknown:slider_by_10web:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:slider_by_10web:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	Slider By 10Web (`29f199f0-c96a-5d71-a5bb-1a44123ec495`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-8283`	vulnerable	2026-06-08 07:00:24.044833	Slider by 10Web < 1.2.59 - Admin+ Stored XSS The Slider by 10Web WordPress plugin before 1.2.59 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Published: 2024-09-30T06:00:06.824Z Updated: 2024-10-01T14:08:52.155Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/a60aed55-c0a2-4912-8844-cdddf31d90b6/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6408`	vulnerable	2026-06-08 06:58:19.369543	Slider by 10Web < 1.2.57 - Editor+ Stored XSS The Slider by 10Web WordPress plugin before 1.2.57 does not sanitise and escape its Slider Title, which could allow high privilege users such as editors and above to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed Published: 2024-07-31T06:00:03.358Z Updated: 2024-07-31T13:30:13.727Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/31aaeffb-a752-4941-9d0f-1b374fbc7abb/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6026`	vulnerable	2026-06-08 06:58:17.240435	Slider by 10Web < 1.2.56 - Editor+ Stored XSS The Slider by 10Web WordPress plugin before 1.2.56 does not sanitise and escape some of its Slide options, which could allow authenticated users with access to the Sliders (by default Administrator, however this can be changed via the Slider by 10Web WordPress plugin before 1.2.56's options) and the ability to add images (Editor+) to perform Stored Cross-Site Scripting attacks Published: 2024-07-11T06:00:04.304Z Updated: 2024-08-01T21:25:03.207Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/01609d84-e9eb-46a9-b2cc-fe7e0c982984/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10566`	vulnerable	2026-06-08 06:23:46.963589	Slider by 10Web < 1.2.62 - Contributor+ Stored XSS The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Published: 2025-03-25T06:00:08.136Z Updated: 2025-03-25T13:58:21.126Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/a98a7f11-4c01-4b91-8adc-465beefa310a/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10565`	vulnerable	2026-06-08 06:23:46.962084	Slider by 10Web < 1.2.62 - Admin+ Stored XSS via Widget The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Published: 2025-03-25T06:00:07.486Z Updated: 2025-03-25T13:58:26.714Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/4ef05302-a6ca-4816-ab0d-a4e3bf7a5e22/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-24132`	vulnerable	2026-06-08 05:30:03.832527	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.