Vulnerabilities in nik00726
28 resultsVexday analysis
O fornecedor nik00726 apresenta 27 vulnerabilidades catalogadas, com apenas 1 crítica (CVSS) e nenhuma sob exploração ativa conhecida, reduzindo a urgência operacional imediata. A fraqueza dominante é injeção de cross-site scripting (CWE-79), típica de aplicações web, exigindo validação rigorosa de entrada. Sem publicações recentes nos últimos 90 dias, o risco mantém-se estável, mas requer remediação ordenada das falhas de validação.
CVE-2023-5945MEDIUMThe video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missEPSS 0.3%CVE-2023-7295MEDIUMVideo Grid <= 1.21 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2015-10147MEDIUMEasy Testimonial Slider and Form <= 1.0.2 - Authenticated (Admin+) SQL injectionEPSS 0.3%CVE-2023-5821MEDIUMThe Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce EPSS 0.3%CVE-2015-10146MEDIUMThumbnail Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL InjectionEPSS 0.3%CVE-2023-5531MEDIUMThumbnail Slider With Lightbox <= 1.0 - Cross-Site Request ForgeryEPSS 0.3%CVE-2026-18344MEDIUMResponsive Thumbnail Slider < 1.1.53 - Reflected Cross-Site Scripting via 'id' ParameterEPSS 0.2%CVE-2015-10130MEDIUMThe Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to mEPSS 0.2%