Nik00726 Thumbnail Carousel Slider
4 CVEs affecting Nik00726 Thumbnail Carousel Slider. Latest disclosed: 2025-07-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-10144 | High | 8.8 | 2025-07-25 | The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploade… |
CVE-2023-2120 | Medium | 6.1 | 2023-04-18 | The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and includi… |
CVE-2019-25222 | Medium | 4.9 | 2025-03-15 | The Thumbnail carousel slider plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to ins… |
CVE-2023-5821 | Medium | 4.3 | 2023-10-27 | The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the d… |