CVE-2026-109691mediumCWE-79

CVE-2026-109691: falha de média gravidade em BdThemes Prime Slider – Addons For Elementor

WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability

Publicada em

Seguir esta CVE+ Monitorar Prime Slider – Addons for Elementor

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.1%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 4.7.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
BdThemes · Prime Slider – Addons For Elementor
CVEs relacionadas — BdThemes Prime Slider – Addons For Elementor

No mesmo produto, das mais perigosas para as menos.

CVE-2024-32682HIGHWordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-32681MEDIUMWordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-24883MEDIUMWordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerabilityEPSS 0.4%CVE-2024-30186MEDIUMWordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-105875MEDIUMWordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%