WordPress security by component

Horizontal scrolling announcement

Plugin description

Horizontal scrolling announcement is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Oct 20, 2023; the highest CVE/CNA score is 8.8.

Plugin slug: horizontal-scrolling-announcement

Latest vulnerability

CVE-2023-4999: Horizontal scrolling announcement: SQL injection

Horizontal scrolling announcement is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.

PublishedOct 20, 2023

Safe version guidanceSee mitigation notes

		Safe version
Oct 20, 2023	CVE-2023-4999 Horizontal scrolling announcement: SQL injection Horizontal scrolling announcement is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.8 NVD8.8
Sep 16, 2023	CVE-2023-5001 Horizontal scrolling announcement: Cross-site scripting Horizontal scrolling announcement is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVD5.4