Tribulant vulnerabilities

Products

• Newsletters 15
• Slideshow Gallery 9
• Slideshow Gallery 5
• Slideshow Gallery Lite 2

Newest

• contrid newsletters Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion CVE-2025-4857 7.2 HighMay 31, 2025
• contrid newsletters Newsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To Parameter CVE-2024-13739 6.1 MediumMarch 22, 2025
• contrid newsletters Newsletters <= 4.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via newsletters_video Shortcode CVE-2024-10181 6.4 MediumOctober 29, 2024
• tribulant slideshow gallery WordPress Slideshow Gallery LITE plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-47376 5.9 MediumOctober 5, 2024
• contrid newsletters Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation CVE-2024-8247 8.8 HighSeptember 6, 2024
• tribulant newsletters WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-43279 7.1 HighAugust 18, 2024
• contrid newsletters Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure CVE-2024-7411 5.3 MediumAugust 15, 2024
• tribulant newsletters WordPress Newsletters plugin <= 4.9.7 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37227 4.3 MediumJune 21, 2024
• contrid slideshow gallery lite Slideshow Gallery LITE <= 1.8.1 - Authenticated (Contributor+) SQL Injection CVE-2024-5543 8.1 HighJune 12, 2024
• tribulant newsletters WordPress Newsletters plugin <= 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-35718 7.1 HighJune 8, 2024
• tribulant newsletters WordPress Newsletters plugin <= 4.9.5 - Arbitrary File Upload vulnerability CVE-2024-32954 9.1 CriticalApril 24, 2024
• newsletters WordPress Newsletters plugin <= 4.9.5 - Sensitive Data Exposure vulnerability CVE-2024-32953 7.5 HighApril 24, 2024
• tribulant slideshow gallery WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31354 4.3 MediumApril 12, 2024
• tribulant slideshow gallery WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Auth. SQL Injection vulnerability CVE-2024-31355 8.5 HighApril 10, 2024
• tribulant slideshow gallery WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability CVE-2024-31353 5.3 MediumApril 10, 2024
• tribulant newsletters Newsletter Lite < 4.9.3 - Admin+ Command Injection CVE-2023-4797 7.2 HighJanuary 16, 2024
• contrid slideshow gallery lite, tribulant slideshow gallery +1 more WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection CVE-2023-28491 6.7 MediumDecember 20, 2023
• contrid slideshow gallery lite, tribulant slideshow gallery +1 more WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-28497 5.4 MediumNovember 12, 2023
• tribulant newsletters WordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-30478 5.4 MediumNovember 10, 2023
• tribulant slideshow gallery Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site Scripting CVE-2021-24882 4.8 MediumNovember 23, 2021
• tribulant newsletter Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated... CVE-2020-35932 7.5 HighJanuary 1, 2021
• tribulant one click ssl The one-click-ssl plugin before 1.4.7 for WordPress has CSRF. CVE-2019-15828 8.8 HighAugust 30, 2019
• tribulant newsletters The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection. CVE-2018-20987 9.8 CriticalAugust 22, 2019
• tribulant newsletters wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin... CVE-2019-14788 8.8 HighAugust 15, 2019
• tribulant newsletters The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin... CVE-2019-14787 5.4 MediumAugust 9, 2019
• tribulant slideshow gallery XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin... CVE-2018-18019 6.1 MediumApril 15, 2019
• tribulant slideshow gallery SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp... CVE-2018-18018 9.8 CriticalApril 15, 2019
• tribulant slideshow gallery XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin... CVE-2018-18017 6.1 MediumApril 15, 2019
• tribulant slideshow gallery The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method,... CVE-2018-17946 6.1 MediumOctober 3, 2018
• tribulant tibulant slideshow gallery Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for... CVE-2014-5460 Public exploit EPSS 70.9% 6.5 MediumSeptember 11, 2014