wonderplugin
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Wonder Slider | 1 | – | Jul 26, 2025 |
| Wonder Slider Lite | 1 | – | Jul 26, 2025 |
| Wonder Video Embed | 1 | – | Feb 18, 2025 |
Exploited and recent CVEs
- CVE-2025-7501 Wonder Slider Lite & Wonder Slider <= 14.4 - Authenticated (Contributor+) Dom-based Stored Cross-Site Scripting 0.3%
- CVE-2025-7501 Wonder Slider Lite & Wonder Slider <= 14.4 - Authenticated (Contributor+) Dom-based Stored Cross-Site Scripting 0.3%
- CVE-2024-13743 Wonder Video Embed <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%