# cve.now: Nik00726

The newest entries naming Nik00726 as an affected vendor (up to 200), of 28 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-18344](https://cve.now/CVE-2026-18344.md): Responsive Thumbnail Slider \< 1.1.53 - Reflected Cross-Site Scripting via 'id' Parameter (CVSS 6.1)
- [CVE-2015-10147](https://cve.now/CVE-2015-10147.md): Easy Testimonial Slider and Form \<= 1.0.2 - Authenticated (Admin+) SQL injection (CVSS 4.9)
- [CVE-2015-10146](https://cve.now/CVE-2015-10146.md): Thumbnail Slider With Lightbox \<= 1.0.4 - Authenticated (Admin+) SQL Injection (CVSS 4.9)
- [CVE-2025-10049](https://cve.now/CVE-2025-10049.md): Responsive Filterable Portfolio \<= 1.0.24 - Authenticated (Admin+) Arbitrary File Upload (CVSS 7.2)
- [CVE-2015-10144](https://cve.now/CVE-2015-10144.md): Responsive Thumbnail Slider \< 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
- [CVE-2019-25223](https://cve.now/CVE-2019-25223.md): Team Circle Image Slider With Lightbox \<= 1.0.4 - Authenticated (Admin+) SQL Injection (CVSS 4.9)
- [CVE-2019-25222](https://cve.now/CVE-2019-25222.md): Thumbnail carousel slider \<= 1.0.4 - Authenticated (Admin+) SQL Injection (CVSS 4.9)
- [CVE-2024-12237](https://cve.now/CVE-2024-12237.md): Photo Gallery Slideshow & Masonry Tiled Gallery \<= 1.0.15 - Authenticated (Subscriber+) Limited Server-Side Request Forgery (CVSS 4.3)
- [CVE-2019-25221](https://cve.now/CVE-2019-25221.md): Responsive Filterable Portfolio \<=1.0.8 - Authenticated (Admin+) SQL Injection (CVSS 6.5)
- [CVE-2024-11195](https://cve.now/CVE-2024-11195.md): Email Subscription Popup \<= 1.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via print\_email\_subscribe\_form Shortcode (CVSS 6.4)
- [CVE-2019-25218](https://cve.now/CVE-2019-25218.md): Photo Gallery Slideshow & Masonry Tiled Gallery \<= 1.0.3 - Authenticated (Admin+) SQL Injection (CVSS 4.9)
- [CVE-2023-7295](https://cve.now/CVE-2023-7295.md): Video Grid \<= 1.21 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2019-25212](https://cve.now/CVE-2019-25212.md): video carousel slider with lightbox \<= 1.0.6 - Authenticated (Admin+) SQL Injection (CVSS 4.9)
- [CVE-2015-10130](https://cve.now/CVE-2015-10130.md): The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. (CVSS 5.3)
- [CVE-2023-6527](https://cve.now/CVE-2023-6527.md): Email Subscription Popup \<= 1.2.18 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2023-5945](https://cve.now/CVE-2023-5945.md): The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. (CVSS 4.3)
- [CVE-2023-5820](https://cve.now/CVE-2023-5820.md): The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. (CVSS 9.6)
- [CVE-2023-5821](https://cve.now/CVE-2023-5821.md): The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. (CVSS 4.3)
- [CVE-2023-5621](https://cve.now/CVE-2023-5621.md): Thumbnail Slider With Lightbox \<= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Image Title (CVSS 4.4)
- [CVE-2023-5531](https://cve.now/CVE-2023-5531.md): Thumbnail Slider With Lightbox \<= 1.0 - Cross-Site Request Forgery (CVSS 4.3)
- [CVE-2023-2184](https://cve.now/CVE-2023-2184.md): WP Responsive Tabs horizontal vertical and accordion Tabs \<= 1.1.15 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2023-2289](https://cve.now/CVE-2023-2289.md): wordpress vertical image slider plugin \<= 1.2.16 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2023-2402](https://cve.now/CVE-2023-2402.md): Photo Gallery Slideshow & Masonry Tiled Gallery \<= 1.0.13 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2023-2604](https://cve.now/CVE-2023-2604.md): Team Circle Image Slider With Lightbox \<= 1.0.17 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2023-2710](https://cve.now/CVE-2023-2710.md): video carousel slider with lightbox \<= 1.0.22 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2023-2708](https://cve.now/CVE-2023-2708.md): Video Gallery \<= 1.0.10 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2023-2120](https://cve.now/CVE-2023-2120.md): Thumbnail carousel slider \<= 1.1.9 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2023-2119](https://cve.now/CVE-2023-2119.md): Responsive Filterable Portfolio \<= 1.0.19 - Reflected Cross-Site Scripting (CVSS 6.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/nik00726
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.