Nik00726 vulnerabilities
We track 2 vulnerabilities in Nik00726 products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2025.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Nik00726 vulnerabilities
- 7.2 High severity
Responsive Filterable Portfolio: Unrestricted Upload of File with Dangerous Type
The Responsive Filterable Portfolio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the HdnMediaSelection_image field in all versions up to, and including, 1.0.24. This makes it possible for authenticated at
- 8.8 High severity
Thumbnail Slider With Lightbox: Cross-Site Request Forgery
The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the addedit functionality. This makes it possible for unauthenticated attackers to uploa