Vendor

    Tribulant

    26 known vulnerabilities in products by Tribulant, 0 of them actively exploited (CISA KEV).

    Key figures

    26

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Tribulant
    HighCVE-2019-14788

    Tribulant Newsletters: Path Traversal

    		8.8
    CriticalCVE-2018-18018

    Tribulant Slideshow Gallery: SQL Injection

    		9.8
    CriticalCVE-2018-20987

    Tribulant Newsletters: security vulnerability

    		9.8
    HighCVE-2020-35932

    Tribulant Newsletter: Deserialization of Untrusted Data

    		7.5
    Not ratedCVE-2014-5460

    Tribulant Tibulant Slideshow Gallery: Unrestricted File Upload

    		—
    HighCVE-2025-4857

    Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion

    also in 1 other product

    		7.2
    HighCVE-2023-4797

    Newsletter Lite < 4.9.3 - Admin+ Command Injection

    		7.2
    HighCVE-2019-15828

    Tribulant One Click SSL: Cross-Site Request Forgery (CSRF)

    		8.8
    CriticalCVE-2024-32954

    WordPress Newsletters plugin <= 4.9.5 - Arbitrary File Upload vulnerability

    		9.1
    HighCVE-2024-8247

    Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation

    also in 1 other product

    		8.8
    MediumCVE-2018-18019

    Tribulant Slideshow Gallery: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2018-18017

    Tribulant Slideshow Gallery: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2024-31355

    Tribulant Slideshow Gallery: SQL Injection

    		8.5
    HighCVE-2023-28491

    WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection

    		6.7
    MediumCVE-2019-14787

    Tribulant Newsletters: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2018-17946

    Tribulant Slideshow Gallery: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2024-10181

    Contrid Newsletters: Cross-site Scripting

    also in 1 other product

    		6.4
    HighCVE-2024-43279

    WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2024-31353

    WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability

    		5.3
    HighCVE-2024-35718

    WordPress Newsletters plugin <= 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2021-24882

    Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site Scripting

    		4.8
    MediumCVE-2024-13739

    Newsletters <= 4.9.9.7 - Reflected Cross-Site Scripting via To Parameter

    also in 1 other product

    		6.1
    HighCVE-2023-30478

    WordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)

    		5.4
    HighCVE-2023-28497

    WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)

    		5.4
    HighCVE-2024-37227

    WordPress Newsletters plugin <= 4.9.7 - Cross Site Request Forgery (CSRF) vulnerability

    		4.3

    All vulnerabilities in search

    Products

    Products by Tribulant
    Tribulant Newsletters130
    Tribulant Slideshow Gallery110