Advisories · Technology
BdThemes Prime Slider – Addons For Elementor.
Every CVE that names BdThemes Prime Slider – Addons For Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability
- BdThemes Prime Slider – Addons For Elementor
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
- BdThemes Prime Slider – Addons For Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter
- bdthemes Prime Slider – Addons for Elementor
- Cross-site scripting (XSS)
- CVSS 4.9 Medium
WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability
- bdthemes Prime Slider – Addons For Elementor
- Server-side request forgery (SSRF)
- CVSS 4.3 Medium
Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery
- bdthemes Prime Slider – Addons for Elementor
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
- bdthemes Prime Slider – Addons for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget
- bdthemes Prime Slider – Addons for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget
- bdthemes Prime Slider – Addons for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagepiling Widget
- bdthemes Prime Slider – Addons for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- bdthemes Prime Slider – Addons for Elementor
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability
- BdThemes Prime Slider – Addons For Elementor
- Broken access control
- CVSS 7.1 High
WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability
- BdThemes Prime Slider – Addons For Elementor
- Broken access control
- CVSS 5.4 Medium
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stor…
- bdthemes Prime Slider – Addons for Elementor
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability
- BdThemes Prime Slider – Addons For Elementor
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerability
- BdThemes Prime Slider – Addons For Elementor
- Broken access control
- CVSS 6.4 Medium
Prime Slider – Addons For Elementor <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget
- bdthemes Prime Slider – Addons for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Prime Slider – Addons For Elementor <= 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rubix Widget
- bdthemes Prime Slider – Addons for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fiestar Widget
- bdthemes Prime Slider – Addons for Elementor
- Cross-site scripting (XSS)