Crelly Slider

Crelly Slider has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2025; 4 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Authorization Bypass Through User-Controlled Key, SQL Injection.

4 of the records (80%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

3 independent researchers contributed these findings, most of them (2) reported by Bob Matyas. Crelly Slider is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage80%
Open

1

Fixed

4

Get automatic notifications for all Crelly Slider vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2024-3752

Crelly Slider <= 1.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

5 records
Crelly Slider banner
Latestv1.4.7

Crelly Slider

Fabio Rinaldi

Author

Fabio Rinaldi

4.9(112)
98/100
Last Updated
2025-01-02 (2y ago)
Active Installs
10,000+
Downloads
358,999
Requires WP
4.6+
Requires PHP
0+
Tested up to
WP 6.7.7
Created
2014-07-24 (12y ago)

Crelly Slider is a Free / Open Source responsive WordPress slider that supports layers. You can add Texts, Images, YouTube/Vimeo videos using a powerful Drag & Drop Builder and animate each of them. It is perfect to display your creative content in posts and pages. Official WebSite (with live demo) User Friendly Admin Panel Crelly Slider does not require any Coding Knowledge. With the simple admin panel you will be able to create the sliders in the easiest way. Upload images with the default WordPress interface or choose colors using the picker. High Cross Browser Compatibility Most of the animations and the transitions are written in jQuery (using the “animate” function). In this way we can assure the compatibility with modern (even Android and iOs) and older browsers. Drag and Drop Builder How can you position all the elements in to the slider area? You just simply drag them in to the desired position. Like in Powerpoint, you just have to move the object around the Slide. Transitions & Animations Foreach element and slide you can choose an in animation and an out animation using a simple selection menu. You can set the transition speeds and how long the element will take to get in and out. Completely Responsive Responsive means that the Slider will be displayed correctly in every resolution that the user will use. If the display is small (like in a smartphone), the slides and the elements will be scaled to be adapted. Full & Fixed Width Modes Using Crelly Slider you can select between a fixed or a full-width layout (both of them can be responsive). You are the designer, you own the WebSite, just choose the best for it.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C