WordPress security by component

Jquery news ticker

Plugin description

Jquery news ticker is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Dec 19, 2023; the highest CVE/CNA score is 8.8.

Plugin slug: jquery-news-ticker

Latest vulnerability

CVE-2023-5432: Jquery news ticker: Cross-site scripting

Jquery news ticker is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedDec 19, 2023

Safe version guidanceSee mitigation notes

		Safe version
Dec 19, 2023	CVE-2023-5432 Jquery news ticker: Cross-site scripting Jquery news ticker is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVD5.4
Oct 31, 2023	CVE-2023-5430 Jquery news ticker: SQL injection Jquery news ticker is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.8 NVD6.5