Gsplugins
2 CVEs across 10 Gsplugins products. Browse Gsplugins vulnerabilities, severities, and proof-of-concept exploits.
Gsplugins products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-9233 | Medium | 4.3 | 2025-05-15 | The Logo Slider WordPress plugin before 3.7.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in ad… |
CVE-2024-11746 | Medium | 6.4 | 2025-02-12 | The Discover the Best Woocommerce Product Brands Plugin for WordPress – Woocommerce Brands Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scrip… |
CVE-2024-11453 | Medium | 6.4 | 2024-12-03 | The WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t… |
CVE-2024-7716 | Medium | 4.8 | 2024-09-11 | The Logo Slider WordPress plugin before 3.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2024-30192 | Medium | 6.5 | 2024-03-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Pins for Pinterest allows Stored XSS.This i… |
CVE-2023-51530 | Medium | 4.3 | 2024-02-29 | Cross-Site Request Forgery (CSRF) vulnerability in GS Plugins Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation.This issue… |
CVE-2023-0539 | Medium | 5.4 | 2023-02-27 | The GS Insever Portfolio WordPress plugin before 1.4.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post… |
CVE-2023-0559 | Medium | 5.4 | 2023-02-21 | The GS Portfolio for Envato WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/p… |
CVE-2023-0541 | Medium | 5.4 | 2023-02-21 | The GS Books Showcase WordPress plugin before 1.3.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post wh… |
CVE-2023-0540 | Medium | 5.4 | 2023-02-21 | The GS Filterable Portfolio WordPress plugin before 1.6.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/p… |
CVE-2023-0492 | Medium | 5.4 | 2023-02-21 | The GS Products Slider for WooCommerce WordPress plugin before 1.5.9 does not validate and escape some of its shortcode attributes before outputting them back… |
CVE-2022-4624 | Medium | 5.4 | 2023-01-23 | The GS Logo Slider WordPress plugin before 3.3.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which c… |
CVE-2022-40213 | Medium | 4.1 | 2022-09-23 | Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in GS Testimonial Slider plugin <= 1.9.6 at WordPress. |
CVE-2022-35882 | Medium | 4.8 | 2022-07-28 | Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in GS Plugins GS Testimonial Slider plugin <= 1.9.5 at WordPress. |