Quick Interest Slider

Quick Interest Slider has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 6 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (57%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.

6 of the records (86%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

6 independent researchers contributed these findings, most of them (2) reported by Nabil Irawan. Quick Interest Slider is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

5.4/ 10

Patch Coverage86%

Open

Fixed

Get automatic notifications for all Quick Interest Slider vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2025-62153

Quick Interest Slider <= 3.1.5 - Missing Authorization

Read the full analysis

Vulnerability Records

7 records


2026-06-24 00:00	Quick Interest Slider <= 3.1.6 - Reflected Cross-Site Scripting Quick Interest Slider <= 3.1.6	`CVE-2026-56039`	6.1 Medium	hivesec	Yes
2026-04-14 19:44	Quick Interest Slider <= 3.1.5 - Unauthenticated Stored Cross-Site Scripting Quick Interest Slider <= 3.1.5	`CVE-2026-5694`	7.2 High	Chawabhon Netisingha (JNX03)	Yes
2025-11-29 00:00	Quick Interest Slider <= 3.1.5 - Missing Authorization Quick Interest Slider <= 3.1.5	`CVE-2025-62153`	5.3 Medium	Nabil Irawan	No
2025-11-29 00:00	Quick Interest Slider <= 3.1.5 - Cross-Site Request Forgery Quick Interest Slider <= 3.1.5	`CVE-2025-64237`	4.3 Medium	Nabil Irawan	Yes
2025-03-25 00:00	Quick Interest Slider <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Quick Interest Slider <= 3.1.5	`CVE-2025-26738`	6.4 Medium	Muhammad Yudha - DJ	Yes
2024-04-05 00:00	Loan Repayment Calculator and Application Form <= 2.9.4 - Cross-Site Request Forgery Quick Interest Slider <= 2.9.4	`CVE-2024-31263`	4.3 Medium	Skalucy	Yes
2023-12-19 00:00	Loan Repayment Calculator and Application Form <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting Quick Interest Slider <= 2.9.3	`CVE-2023-50829`	4.4 Medium	DoYeon Park (p6rkdoye0n)	Yes

Showing 1–7 of 7 reports

Plugin Profile

Latestv3.1.8

Quick Interest Slider

Author

Graham

4.6(13)

92/100

Last Updated

2026-07-16 (2mo ago)

Active Installs

1,000+

Downloads

64,459

Requires WP

6.0+

Requires PHP

Tested up to

WP 7.0.4

Created

2016-04-05 (11y ago)

Ideal for payday loans, fixed fee payments, regular payments, savings, comparisons and pretty much anything else that gets calculated from a variable amount and term. GDPR compliant. Bespoke versions available for bank comparisons, quotes, full loan applications and so on. Features Ultra lightweight – under 5kB Any currency Multiple interest rates: fixed, simple, compound and amortization Set the max, min, initial and step values on the sliders Set the term to days, weeks, months or years Set interest rate changes with period and amount tiggers Select from a range of different outputs Change the labels on all outputs Style borders, colors and backgrounds GDPR compliant Upgrade to Pro Application form and autoresponders with GDPR compliance Akismet validation Apply Now button for external processing Store, manage and download applications Annuity and amortization repayment calculations Additional layout options Tooltips Downpayment calculation Interest rate sliders Application tracking Developer’s plugin pages loanpaymentplugin.com Example forms Bespoke versions

View on WordPress.org