Lucene search
+L

143 matches found

Patchstack
Patchstack
•added 2026/09/18 1:46 p.m.•10 views

WordPress Prime Slider plugin <= 4.4.5 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Prime Slider – Addons For Elementor versions = 4.4.5...

5.4CVSS5.8AI score0.0043EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/08/11 7:11 a.m.•23 views

WordPress Prime Slider Addons for Elementor – Widgets, Templates & Elementor Addons plugin <= 4.4.5 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Prime Slider – Addons For Elementor versions = 4.4.5...

5.2AI score
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:28 p.m.•21 views

CVE-2026-4341

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'followustext' setting of the Mount widget in all versions up to, and including, 4.1.10. This is due to insufficient input sanitization and output escaping. Specifically, the...

6.4CVSS5.7AI score0.00349EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/08 5:16 a.m.•13 views

CVE-2026-4341

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'followustext' setting of the Mount widget in all versions up to, and including, 4.1.10. This is due to insufficient input sanitization and output escaping. Specifically, the...

6.4CVSS0.00349EPSS
SaveExploits0References6
CVE
CVE
•added 2026/04/08 3:36 a.m.•31 views

CVE-2026-4341

CVE-2026-4341 covers a Stored Cross-Site Scripting vulnerability in the Prime Slider – Addons for Elementor plugin for WordPress (versions up to and including 4.1.10). The root cause is insufficient input sanitization and output escaping in the Mount widget’s render_social_link() function, which ...

6.4CVSS6AI score0.00349EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/08 3:36 a.m.•6 views

CVE-2026-4341 Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'followustext' setting of the Mount widget in all versions up to, and including, 4.1.10. This is due to insufficient input sanitization and output escaping. Specifically, the...

6.4CVSS6.1AI score0.00349EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/04/08 3:36 a.m.•37 views

CVE-2026-4341 Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'followustext' setting of the Mount widget in all versions up to, and including, 4.1.10. This is due to insufficient input sanitization and output escaping. Specifically, the...

6.4CVSS0.00349EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•17 views

WordPress plugin Prime Slider – Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to th...

6.4CVSS5.6AI score0.00349EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•2 views

CVE-2026-4341: Improper Neutralization of Input During Web Page Generation

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'followustext' setting of the Mount widget in all versions up to, and including, 4.1.10. This is due to insufficient input sanitization and output escaping. Specifically, the...

6.4CVSS6AI score0.00349EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•15 views

PT-2026-31081

Name of the Vulnerable Software and Affected Versions Prime Slider – Addons for Elementor plugin for WordPress versions up to and including 4.1.10 Description The Prime Slider – Addons for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient...

6.4CVSS5.9AI score0.00349EPSS
SaveExploits0References12
Patchstack
Patchstack
•added 2026/04/07 11:11 p.m.•17 views

WordPress Prime Slider plugin <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'followustext' Parameter vulnerability discovered by WordFence in WordPress Plugin Prime Slider – Addons For Elementor versions = 4.1.10...

6.4CVSS5.9AI score0.00349EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/02/02 9:15 a.m.•20 views

WordPress Prime Slider - Addons For Elementor plugin <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagepiling Widget vulnerability

WordPress Prime Slider - Addons For Elementor plugin = 3.14.1 - Authenticated Contributor+ Stored Cross-Site Scripting via Pagepiling Widget vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Prime Slider – Addons For Elementor versions = 3.14.1...

6.4CVSS5.3AI score0.00257EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2025/12/30 12:00 a.m.•19 views

WordPress Prime Slider - Addons For Elementor plugin server-side request forgery vulnerability

WordPress Prime Slider - Addons For Elementor plugin is a free plugin for Elementor page builder designed to help users easily create various interactive responsive sliders. The WordPress Prime Slider - Addons For Elementor plugin suffers from a server-side request forgery vulnerability, which...

9.1CVSS6.9AI score0.00167EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•11 views

CVE-2025-68500

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

4.9CVSS7AI score0.00167EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•11 views

EUVD-2025-205209

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

9.1CVSS6.5AI score0.00167EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/24 1:16 p.m.•14 views

CVE-2025-68500

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

4.9CVSS0.00167EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/24 12:31 p.m.•4 views

CVE-2025-68500 WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

4.9CVSS6.6AI score0.00167EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/24 12:31 p.m.•29 views

CVE-2025-68500

The CVE-2025-68500 entry describes a Server-Side Request Forgery (SSRF) in the WordPress plugin Prime Slider – Addons For Elementor (bdthemes-prime-slider-lite). Affected component: bdthemes Prime Slider – Addons For Elementor, via the lite variant; vulnerable version range: up to and including 4...

4.9CVSS6.6AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/24 12:31 p.m.•41 views

CVE-2025-68500 WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

4.9CVSS0.00167EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•11 views

PT-2025-53078

Name of the Vulnerable Software and Affected Versions bdthemes Prime Slider – Addons For Elementor versions through 4.0.10 Description A Server-Side Request Forgery SSRF issue exists in bdthemes Prime Slider – Addons For Elementor. This allows for Server Side Request Forgery. The issue is present...

9.1CVSS6.6AI score0.00167EPSS
SaveExploits0References4
Rows per page
Query Builder