Prime Slider – Addons for Elementor vulnerabilities

Product

Prime Slider – Addons for Elementor

by bdthemes · last CVE Oct 13, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities18 In the news0 Timeline

Severity mix

Critical 0High 2Medium 16Low 0

Severity

All severities18 Critical0 High2 Medium16 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Prime Slider – Addons for Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-109691	6.5	0%	Oct 13	WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability Affected: through 4.7.1
CVE-2026-105875	6.5	0%	Oct 7	WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability Affected: through 4.6.2
CVE-2026-4341	6.4	0%	Apr 8	Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter Affected: through 4.1.10
CVE-2024-12043	5.4	0%	Jan 23	Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.16.5
CVE-2024-8442	5.4	0%	Nov 7	Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget Affected: through 3.15.18
CVE-2024-5640	5.4	0%	Jun 7	Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget Affected: through 3.14.7
CVE-2024-3997	5.4	0%	May 23	Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagepiling Widget Affected: through 3.14.1
CVE-2024-4339	5.4	0%	May 9	Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.14.3
CVE-2024-1730	5.4	0%	Apr 20	Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.14.0
CVE-2024-30186	5.4	0%	Mar 27	WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability Affected: through 3.13.1
CVE-2024-1508	5.4	0%	Mar 13	Prime Slider – Addons For Elementor <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget Affected: through 3.13.2
CVE-2024-1507	5.4	0%	Mar 13	Prime Slider – Addons For Elementor <= 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rubix Widget Affected: through 3.13.3
CVE-2024-1506	5.4	0%	Mar 7	Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fiestar Widget Affected: through 3.13.1
CVE-2025-68500	4.9	0%	Dec 24	WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability Affected: through 4.0.10
CVE-2025-14277	4.3	0%	Dec 18	Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery Affected: through 4.0.9
CVE-2024-24883	4.3	0%	Mar 21	WordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerability Affected: through 3.11.10