VendorsCrelly Slider Projectcrelly_sliderany version
Vulnerabilities

Crelly Slider Project Crelly Slider any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2019-15866
The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider.
Published 2019-09-03 · Modified
8.8EPSS 0.020
CVE-2024-3752
Crelly Slider <= 1.4.5 - Admin+ Stored XSS
Published 2024-05-06 · Analyzed
5.4EPSS 0.004
CVE-2024-33542
WordPress Crelly Slider plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability
Published 2024-04-29 · Analyzed
4.3EPSS 0.004
CVE-2024-13116
Crelly Slider < 1.4.7 - Admin+ Stored XSS
Published 2025-01-27 · Analyzed
3.8EPSS 0.003