← All credits
Ala Arfaoui
40 vulnerability records and advisories credit this contributor.
CVE-2019-25222
Thumbnail carousel slider <= 1.0.4 - Authenticated (Admin+) SQL Injection
CVE-2015-10147
Easy Testimonial Slider and Form <= 1.0.2 - Authenticated (Admin+) SQL injection
CVE-2023-6197
Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Settings Modifcation and Stored Cross-Site Scripting
CVE-2019-25223
Team Circle Image Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
CVE-2024-7647
OTA Sync Booking Engine Widget 1.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVE-2019-25221
Responsive Filterable Portfolio <=1.0.8 - Authenticated (Admin+) SQL Injection
CVE-2019-25212
video carousel slider with lightbox <= 1.0.6 - Authenticated (Admin+) SQL Injection
CVE-2025-14390
Video Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload
CVE-2015-10146
Thumbnail Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
CVE-2023-5621
Thumbnail Slider With Lightbox <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Image Title