CVE-2024-3997

The CVE-2024-3997 issue affects WordPress plugin Prime Slider – Addons For Elementor (bdthemes-prime-slider-lite). It is a Stored Cross-Site Scripting vulnerability in the Pagepiling widget, present in all versions up to 3.14.1, caused by insufficient input sanitization and output escaping on use...

CVE-2024-32681

CVE-2024-32681 is a Missing Authorization vulnerability affecting BdThemes Prime Slider – Addons For Elementor. Reported to affect Prime Slider – Addons For Elementor versions from n/a up to 3.13.2. The connected sources corroborate the issue but do not provide detailed technical reproduction, CV...

CVE-2024-24883

CVE-2024-24883 affects BdThemes Prime Slider – Addons For Elementor (WordPress). Affected versions: up to 3.11.10. Root cause: missing authorization check in bdt_duplicate_as_draft() allows authenticated users with contributor-level access and above to duplicate private/password-protected posts. ...

CVE-2024-1730

CVE-2024-1730 is a Stored Cross-Site Scripting vulnerability in the Prime Slider – Addons For Elementor WordPress plugin. The issue affects all versions up to 3.14.0 and stems from insufficient input sanitization and output escaping in links, images from URLs, and HTML in widgets. Exploitation re...

CVE-2024-32682

CVE-2024-32682 is a Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor affecting Prime Slider – Addons For Elementor up to version 3.13.2. According to the CVSS data referenced, it has a base score of 8.8 (HIGH) with Network attack vector, Low privileges required,...

CVE-2024-1506

CVE-2024-1506 concerns the WordPress plugin “Prime Slider – Addons For Elementor.” The vulnerability is a Stored Cross-Site Scripting issue via the Fiestar widget’s title_tags attribute, present in all versions up to 3.13.1. An attacker with contributor-level access or higher could inject arbitra...

CVE-2024-5640

CVE-2024-5640 affects the Prime Slider – Addons For Elementor plugin (bdthemes-prime-slider-lite) for WordPress. The issue is a Stored Cross‑Site Scripting via the Pacific Widget’s id attribute in all versions up to and including 3.14.7 due to insufficient input sanitization and output escaping. ...

CVE-2024-8442

CVE-2024-8442 corresponds to a Stored Cross-Site Scripting vulnerability in the Prime Slider – Addons For Elementor plugin for WordPress (Revolution of a slider, Hero Slider, Post Slider and Ecommerce Slider). Connected sources confirm the flaw exists in all versions up to 3.15.18 and stems from ...

CVE-2024-12043

CVE-2024-12043 affects the Prime Slider – Addons For Elementor (WordPress) up to version 3.16.5. The vulnerability is a Stored Cross-Site Scripting in the blog widget via the social_link_title parameter, caused by insufficient input sanitization and output escaping. Exploitation requires authenti...

CVE-2024-30186

CVE-2024-30186 affects BdThemes Prime Slider – Addons For Elementor (Prime Slider – Addons For Elementor: from n/a through 3.13.1). Description confirms Stored XSS via improper neutralization during web page generation. The connected documents do not provide explicit technical details about the r...

CVE-2024-1507

CVE-2024-1507 covers a Stored Cross-Site Scripting in the Prime Slider – Addons For Elementor plugin for WordPress. Affected: Prime Slider (Revolution of a slider, Hero Slider, Ecommerce Slider) up to v3.13.2. Root cause: insufficient input sanitization and output escaping for the Rubix widget’s ...

CVE-2024-1508

CVE-2024-1508 describes a stored cross-site scripting flaw in the Prime Slider – Addons For Elementor (WordPress) plugin, affecting all versions up to 3.13.2. The vulnerability arises in the Mercury widget via the settings['title_tags'] attribute due to insufficient input sanitization and output ...

CVE-2024-4339

CVE-2024-4339 is a Stored Cross-Site Scripting vulnerability in the Prime Slider – Addons For Elementor plugin (bdthemes-prime-slider-lite) for WordPress. The issue affects all versions up to 3.14.3 and is caused by insufficient input sanitization and output escaping in the General widget, allowi...