Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: bdthemes Component: Prime Slider Clear all filters
TI-2024-11174 CVE-2024-12043 · GHSA-9736-p97g-656h

Cross-site scripting in bdthemes Prime Slider – Addons for Elementor

Priority LOW 28

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Post Slider and Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'social_link_title' parameter of t…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0023 Published 2025-01-23 No fix listed CWE-79
TI-2024-07825 CVE-2024-8442 · GHSA-87m5-7j63-58f7

Cross-site scripting in bdthemes Prime Slider – Addons for Elementor

Priority LOW 28

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Blog widget in all versions up to, and in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-11-07 No fix listed CWE-79
TI-2024-05237 CVE-2024-5640 · GHSA-xhwx-76j2-m76q

Cross-site scripting in bdthemes Prime Slider – Addons for Elementor

Priority LOW 30

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all ve…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00321 Published 2024-06-07 No fix listed CWE-79
TI-2024-03729 CVE-2024-3997 · GHSA-jrqv-ghx4-fj7f

Cross-site scripting in bdthemes Prime Slider – Addons for Elementor

Priority LOW 28

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pagepiling widget in all versions up to,…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00257 Published 2024-05-23 No fix listed CWE-79
TI-2024-04041 CVE-2024-4339 · GHSA-8gqg-pg7w-9c36

Cross-site scripting in bdthemes Prime Slider – Addons for Elementor

Priority LOW 28

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the General widget in all versions up to, and includin…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0034 Published 2024-05-09 No fix listed CWE-79
TI-2024-01609 CVE-2024-1730 · GHSA-78g6-g9hf-844c

Cross-site scripting in bdthemes Prime Slider – Addons for Elementor

Priority LOW 24

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Script…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0034 Published 2024-04-20 No fix listed CWE-79
TI-2024-19932 CVE-2024-30186 · GHSA-hfm4-r5j9-2q25

WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor:…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00348 Published 2024-03-27 No fix listed CWE-79
TI-2024-01409 CVE-2024-1508 · GHSA-c95m-j3w4-xm3c

Cross-site scripting in bdthemes Prime Slider – Addons for Elementor

Priority LOW 28

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings['title_tags']' attribute of the Mercury widget in all versions up to, and including, 3.13.2 due…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00335 Published 2024-03-13 No fix listed CWE-79
TI-2024-01408 CVE-2024-1507 · GHSA-2mwg-2rcf-frrv

Cross-site scripting in bdthemes Prime Slider – Addons for Elementor

Priority LOW 29

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title_tags' attribute of the Rubix widget in all versions up to, and including, 3.13.3 due to insufficien…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00434 Published 2024-03-13 No fix listed CWE-79
TI-2024-01407 CVE-2024-1506 · GHSA-gw6g-58xc-qjh4

Cross-site scripting in bdthemes Prime Slider – Addons for Elementor

Priority LOW 28

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title_tags' attribute of the Fiestar widget in all versions up to, and including, 3.13.1 due to insuffici…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00343 Published 2024-03-07 No fix listed CWE-79