I13websolution
4 CVEs across 20 I13websolution products. Browse I13websolution vulnerabilities, severities, and proof-of-concept exploits.
I13websolution products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-10147 | Medium | 4.9 | 2025-10-29 | The Easy Testimonial Slider and Form plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.2 due… |
CVE-2015-10146 | Medium | 4.9 | 2025-10-29 | The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due t… |
CVE-2015-10144 | High | 8.8 | 2025-07-25 | The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploade… |
CVE-2019-25222 | Medium | 4.9 | 2025-03-15 | The Thumbnail carousel slider plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to ins… |
CVE-2019-25221 | Medium | 6.5 | 2024-12-13 | The Responsive Filterable Portfolio plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.8 due… |
CVE-2024-11195 | Medium | 6.4 | 2024-11-19 | The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_email_subscribe_form shortcode in all ver… |
CVE-2019-25218 | Medium | 4.9 | 2024-10-19 | The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and inclu… |
CVE-2019-25212 | Medium | 4.9 | 2024-09-11 | The video carousel slider with lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.6… |
CVE-2024-30497 | High | 8.5 | 2024-03-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal ver… |
CVE-2024-27960 | High | 7.1 | 2024-03-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Email Subscription Popup allows S… |
CVE-2015-10130 | Medium | 5.3 | 2024-03-13 | The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect… |
CVE-2023-6555 | Medium | 6.1 | 2024-01-08 | The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflec… |
CVE-2023-6527 | Medium | 6.1 | 2023-12-06 | The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER header in all versions up to, and includ… |
CVE-2023-47226 | Medium | 5.9 | 2023-11-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Post Sliders & Post Grids plugin <= 1.0.20 versions. |
CVE-2023-5945 | Medium | 4.3 | 2023-11-03 | The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect no… |
CVE-2023-5821 | Medium | 4.3 | 2023-10-27 | The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the d… |
CVE-2023-5820 | Critical | 9.6 | 2023-10-27 | The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce v… |
CVE-2023-45754 | Medium | 5.9 | 2023-10-25 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form… |
CVE-2023-5621 | Medium | 4.4 | 2023-10-18 | The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Title field in versions up to, and including… |
CVE-2023-5531 | Medium | 4.3 | 2023-10-12 | The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missi… |
CVE-2023-41731 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WordPress publish post email notification plugin <= 1.0.2.2 versions. |
CVE-2023-41658 | High | 7.1 | 2023-09-29 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery plugin <= 1.0.13 versions. |
CVE-2023-32597 | High | 7.1 | 2023-08-30 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Gallery plugin <= 1.0.10 versions. |
CVE-2023-32797 | High | 7.1 | 2023-08-25 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution video carousel slider with lightbox plugin <= 1.0.22 versions. |
CVE-2023-30785 | High | 7.1 | 2023-08-16 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Grid plugin <= 1.21 versions. |
CVE-2023-30489 | High | 7.1 | 2023-08-14 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <= 1.2.16 versions. |
CVE-2023-24413 | High | 7.1 | 2023-08-08 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WordPress vertical image slider plugin <= 1.2.16 versions. |
CVE-2023-24409 | High | 7.1 | 2023-08-08 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs plugin <= 1.1.1… |
CVE-2023-28776 | High | 7.1 | 2023-06-22 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versions. |
CVE-2023-2604 | Medium | 6.1 | 2023-06-09 | The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up… |
CVE-2023-2402 | Medium | 6.1 | 2023-06-09 | The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versi… |
CVE-2023-2289 | Medium | 6.1 | 2023-06-09 | The wordpress vertical image slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and… |
CVE-2023-2184 | Medium | 6.1 | 2023-06-09 | The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term paramete… |
CVE-2023-2710 | Medium | 6.1 | 2023-05-16 | The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, a… |
CVE-2023-2708 | Medium | 6.1 | 2023-05-16 | The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.0.10… |
CVE-2023-1915 | Medium | 6.1 | 2023-05-15 | The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputting them back in pages, leading to Refl… |
CVE-2022-47600 | High | 7.1 | 2023-05-10 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Mass Email To users plugin <= 1.1.4 versions. |
CVE-2023-24392 | High | 7.1 | 2023-05-10 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin <= 1.1.7 versions. |
CVE-2022-46799 | High | 7.1 | 2023-05-08 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form plugin <= 1.0.15 versions. |
CVE-2023-2120 | Medium | 6.1 | 2023-04-18 | The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and includi… |
CVE-2023-2119 | Medium | 6.1 | 2023-04-18 | The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and i… |
CVE-2023-28792 | High | 7.1 | 2023-04-07 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versions. |
CVE-2022-0648 | Medium | 6.1 | 2022-03-14 | The Team Circle Image Slider With Lightbox WordPress plugin before 1.0.16 does not sanitize and escape the order_pos parameter before outputting it back in an… |