Prime Slider – Addons For Elementor
bdthemes
Developer
4.1.9
Latest version
100,000
Installations
No date
Last updated
Vulnerability history
0 present
17 patched
4 Mitigation rules
- WordPress Prime Slider - Addons For Elementor plugin <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagepiling Widget vulnerability<= 3.14.1Feb 2, 2026
- Authenticated (Subscriber+) Server-Side Request Forgery vulnerability<= 4.0.9Dec 18, 2025
- Server Side Request Forgery (SSRF) vulnerability<= 4.0.10Dec 13, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.16.5Jan 22, 2025
- WordPress Prime Slider - Addons For Elementor plugin <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget vulnerability<= 3.15.18Nov 7, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget vulnerability<= 3.14.7Jun 7, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.14.3May 7, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.14.0Apr 22, 2024
- Broken Access Control vulnerability<= 3.13.2Apr 17, 2024
- Broken Access Control vulnerability<= 3.13.2Apr 17, 2024
- Cross Site Scripting (XSS) vulnerability<= 3.13.1Mar 25, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Rubix Widget vulnerability<= 3.13.2Mar 13, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget vulnerability<= 3.13.2Mar 13, 2024
- Broken Access Control on Duplicate Post vulnerability<= 3.11.10Feb 5, 2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 3.8.2Jul 18, 2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability<= 2.6.2Feb 28, 2022
- Sensitive Information Disclosure vulnerability<= 2.6.2Feb 28, 2022