Logichunt vulnerabilities
12 vulnerabilities
Known vulnerabilities in Logichunt products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.
Products
7- Logo Slider7 vulnerabilities
- Logo Slider WP – Responsive Logo Carousel, Logo Gallery & Logo Showcase2 vulnerabilities
- Counter Up – Animated Number Counter & Milestone Showcase1 vulnerabilities
- Owl Carousel1 vulnerabilities
- OWL Carousel – Wordpress Owl Carousel Slider1 vulnerabilities
- Portfolio – Filterable Masonry Portfolio Gallery For Professionals1 vulnerabilities
- Logo Slider – Logo Carousel, Logo Showcase & Client Logo Slider Plugin0 vulnerabilities
CVE-2022-4664logichuntlogo_slider+2
EPSS score0.58%
The Logo Slider WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacksCVE-2024-11900logichuntportfolio – filterable masonry portfolio gallery for professionals+1EPSS score0.32%
The Portfolio – Filterable Masonry Portfolio Gallery for Professionals plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'portfolio-pro' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2024-5429logichuntlogo_slider+2EPSS score0.48%
The Logo Slider WordPress plugin before 4.1.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacksCVE-2024-10473logichuntlogo_slider+2EPSS score0.38%
The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo Settings when outputing them in pages where the Logo Slider shortcode is embed, which could allow users with a role as low as Author to perform Cross-Site Scripting attacks.CVE-2024-10895logichuntcounter up – animated number counter & milestone showcase+1EPSS score0.24%
The Counter Up – Animated Number Counter & Milestone Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lgx-counter' shortcode in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2024-10896logichuntlogo_slider+2EPSS score0.38%
The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo and Slider settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site ScriptingCVE-2024-24801logichuntowl_carousel+2EPSS score0.33%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0.CVE-2024-12308logichuntlogo_slider+2EPSS score0.29%
The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.CVE-2024-3288logichuntlogo_slider+2EPSS score0.29%
The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacksCVE-2026-13247logichuntlogo slider wp – responsive logo carousel, logo gallery & logo showcase+1EPSS score0.33%
The Logo Slider – Logo Carousel, Client Logo Slider & Brand Showcase for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lgx_tooltip_position' parameter in all versions up to, and including, 5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2026-0609logichuntlogo slider wp – responsive logo carousel, logo gallery & logo showcase+1EPSS score0.19%
The Logo Slider – Logo Carousel, Logo Showcase & Client Logo Slider Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image alt text in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output escaping in the 'logo-slider' shortcode. This makes it possible for authenticated attackers, with author level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2026-24626logichuntlogo_slider+1EPSS score0.17%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through <= 5.1.1.