GCVE - cpe:2.3:a:logichunt:logo_slider:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:logichunt:logo_slider:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Logichunt (`4a73f205-d7ae-5c5c-9614-aeeaecd8978a`)
Product	Logo Slider (`d91595f0-d389-5c2e-bc07-34f242f3b2c2`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-5429`	vulnerable	2026-06-08 06:56:16.000014	Logo Slider < 4.1.0 - Contributor+ Stored XSS The Logo Slider WordPress plugin before 4.1.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Published: 2024-10-17T06:00:04.449Z Updated: 2024-10-17T18:32:41.143Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/ddb76c88-aeca-42df-830e-abffd29f1141/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-3288`	vulnerable	2026-06-08 06:41:52.889586	Logo Slider < 4.0.0 - Contributor+ Stored XSS The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Published: 2024-06-07T06:00:02.259Z Updated: 2024-11-06T23:14:21.788Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/4ef99f54-68df-4353-8fc0-9b09ac0df7ba/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-12308`	vulnerable	2026-06-08 06:23:51.695762	Logo Slider < 4.6.0 - Contributor+ Stored XSS The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Published: 2025-02-24T06:00:02.865Z Updated: 2025-02-24T11:32:57.320Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/fa82ada7-357b-4f01-a0d6-ff633b188a80/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10896`	vulnerable	2026-06-08 06:23:47.935593	Logo Slider < 4.5.0 - Contributor+ Stored XSS The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo and Slider settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting Published: 2024-11-28T06:00:12.112Z Updated: 2024-11-29T15:39:39.900Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/1304c2b6-922d-455e-bae8-d6bf855eddd9/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10473`	vulnerable	2026-06-08 06:23:46.695034	Logo Slider < 4.5.0 - Author+ Stored XSS The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo Settings when outputing them in pages where the Logo Slider shortcode is embed, which could allow users with a role as low as Author to perform Cross-Site Scripting attacks. Published: 2024-11-28T06:00:05.185Z Updated: 2024-11-29T15:50:32.875Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/7512cbdf-cf27-4a1f-bac8-9fcb14bf463e/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-4664`	vulnerable	2026-06-08 05:52:00.139616	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.