Nextcode

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-29439 Jun 15, 16:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress allows deleting slides. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin Image Slider By Nextcode Nextcode

NVD

CVSS 3.1

4.3

EPSS

0.4%

CVE-2022-29438 Jun 15, 16:15 MEDIUM This Month

Authenticated (author or higher user role) Persistent Cross-Site Scripting (XSS) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin Image Slider By Nextcode Nextcode

NVD

CVSS 3.1

4.8

EPSS

0.5%

CVE-2022-29437 Jun 15, 16:15 HIGH This Week

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Image Slider by NextCode plugin <= 1.1.2 at WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin Image Slider By Nextcode Nextcode

NVD

CVSS 3.1

8.8

EPSS

0.4%

CVE-2022-29439

EPSS 0% CVSS 4.3

MEDIUM This Month

WordPress CSRF Wordpress Plugin +2

NVD

CVE-2022-29438

EPSS 1% CVSS 4.8

MEDIUM This Month

WordPress XSS Wordpress Plugin +2

NVD

CVE-2022-29437

EPSS 0% CVSS 8.8

HIGH This Week

WordPress CSRF Wordpress Plugin +2

NVD