Vulnerabilities (CVE)

Filtered by vendor Tribulant Subscribe
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-17946 1 Tribulant 1 Slideshow Gallery 2018-11-16 4.3 MEDIUM 6.1 MEDIUM
The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter.
CVE-2014-5460 1 Tribulant 1 Tibulant Slideshow Gallery 2018-10-09 6.5 MEDIUM N/A
Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by uploading a PHP file, then accessing it via a direct request to the file in wp-content/uploads/slideshow-gallery/.