Tribulant vulnerabilities
We track 5 vulnerabilities in Tribulant products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 6, 2024.
Latest Tribulant vulnerabilities
- 8.8 High severity
Newsletters: Improper Privilege Management
The Newsletters plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.9.9.2. This is due to the plugin not restricting what user meta can be updated as screen options. This makes it possible for authenticated attack
- 7.1 High severity
Newsletters: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a through 4.9.8.
- 8.1 High severity
Slideshow Gallery LITE: Improper Neutralization of Special Elements used in an SQL Command
The Slideshow Gallery LITE plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in all versions up to, and including, 1.8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exi
- 8.5 High severity
Slideshow Gallery: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8.
- 7.2 High severity
Slideshow Gallery LITE: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery LITE.This issue affects Slideshow Gallery LITE: from n/a through 1.7.6.