Logo Slider (Unknown) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-01-02. Vendor: Unknown.
CVEs of Logo Slider
- CVE-2025-13153 - CVSS 6.1 (medium), 2026-01-02: The Logo Slider WordPress plugin before 4.9.0 does not validate and escape some of its slider options before outputting them back in the dashboard, which…
- CVE-2024-9233 - CVSS 4.3 (medium), 2025-05-15: The Logo Slider WordPress plugin before 3.7.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in…
- CVE-2024-12308 - CVSS 5.4 (medium), 2025-02-24: The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where…
- CVE-2024-10896 - CVSS 5.4 (medium), 2024-11-28: The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo and Slider settings, which could allow high privilege users such…
- CVE-2024-10473 - CVSS 5.4 (medium), 2024-11-28: The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo Settings when outputing them in pages where the Logo Slider…
- CVE-2024-5429 - CVSS 7.6 (high), 2024-10-17: The Logo Slider WordPress plugin before 4.1.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could…
- CVE-2024-7716 - CVSS 4.8 (medium), 2024-09-11: The Logo Slider WordPress plugin before 3.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
- CVE-2024-3288 - CVSS 5.4 (medium), 2024-06-07: The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could…
- CVE-2022-4664 - CVSS 5.4 (medium), 2023-02-06: The Logo Slider WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where…
- CVE-2022-1687 - CVSS 2.7 (low), 2022-06-08: The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lsp_slider_id parameter before using it in a SQL statement via the Manage…
