Ala Arfaoui

Video Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload

Thumbnail Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection

Thumbnail Slider With Lightbox <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Image Title

Amazonify <= 0.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting

Amazonify <= 0.8.1 - Cross-Site Request Forgery to Amazon Tracking ID Update

Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload

Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.3 - Authenticated (Admin+) SQL Injection

Thumbnail Slider With Lightbox <= 1.0 - Cross-Site Request Forgery

The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the deleteselected function. This makes it possible for unauthenticated attackers to delete sliders i

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the addedit functionality. This makes it possible for unauthenticated attackers to