What’s Vulnerable › Products
bdthemes Prime Slider – Addons for Elementor vulnerabilities
19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your bdthemes Prime Slider – Addons for Elementor version is affected
Latest bdthemes Prime Slider – Addons for Elementor vulnerabilities
- CVE-2026-109691 — WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-105875 — WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-4341 — Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter (CVSS 6.4)
- CVE-2025-68500 — WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9)
- CVE-2025-14277 — Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery (CVSS 4.3)
- CVE-2024-12043 — Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2024-8442 — Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget (CVSS 5.4)
- CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
- CVE-2024-5640 — Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget (CVSS 5.4)
- CVE-2024-3997 — Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagepiling Widget (CVSS 5.4)
- CVE-2024-4339 — Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2024-32682 — WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability (CVSS 8.8)
- CVE-2024-32681 — WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability (CVSS 8.8)
- CVE-2024-1730 — Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2024-24883 — WordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerability (CVSS 4.3)
- CVE-2024-30186 — WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-1508 — Prime Slider – Addons For Elementor <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget (CVSS 5.4)
- CVE-2024-1507 — Prime Slider – Addons For Elementor <= 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rubix Widget (CVSS 5.4)
- CVE-2024-1506 — Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fiestar Widget (CVSS 5.4)