bqworks

Products

ProductCVEsExploitedLatest
Accordion Slider4–Nov 21, 2025
Slider Pro2–Jul 23, 2026
Accordion Slider Lite1–Jan 11, 2025
Grid Accordion Lite1–Jan 11, 2025
Slider Pro Lite1–Jan 7, 2025

Exploited and recent CVEs

  • CVE-2026-57699 High 7.1 WordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-66092 Medium 6.5 WordPress Accordion Slider plugin <= 1.9.13 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-11892 Medium 6.4 Accordion Slider Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-11874 Medium 6.4 Grid Accordion Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-11899 Medium 6.4 Slider Pro Lite <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2023-41865 Medium 4.3 WordPress Slider Pro plugin <= 4.8.6 - Broken Access Control vulnerability 0.5%
  • CVE-2023-40331 Medium 4.3 WordPress Accordion Slider plugin <= 1.9.6 - Broken Access Control vulnerability 0.5%
  • CVE-2024-5020 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library 0.4%
  • CVE-2024-9582 Medium 6.4 Accordion Slider <= 1.9.11 - Authenticted (Contributor+) Stored Cross-Site Scripting via HTML Attribute 0.3%