BDThemes Prime Slider – Addons For Elementor

• CVE-2026-109691 Medium 6.5 WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability 0.1%
• CVE-2026-105875 Medium 6.5 WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability 0.1%
• CVE-2026-4341 Medium 6.4 Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter 0.4%
• CVE-2025-68500 Medium 4.9 WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability 0.2%
• CVE-2025-14277 Medium 4.3 Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery 0.3%
• CVE-2024-12043 Medium 6.4 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2024-8442 Medium 6.4 Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget 0.3%
• CVE-2024-5640 Medium 6.4 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget 0.3%
• CVE-2024-3997 Medium 6.4 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagepiling Widget 0.3%
• CVE-2024-4339 Medium 6.4 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-32681 Medium 4.3 WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability 0.4%
• CVE-2024-32682 High 7.1 WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability 0.5%
• CVE-2024-1730 Medium 5.4 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-30186 Medium 6.5 WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-24883 Medium 4.3 WordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerability 0.4%
• CVE-2024-1508 Medium 6.4 Prime Slider – Addons For Elementor <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget 0.3%
• CVE-2024-1507 Medium 6.4 Prime Slider – Addons For Elementor <= 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rubix Widget 0.4%
• CVE-2024-1506 Medium 6.4 Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fiestar Widget 0.3%