Slider Templates

Slider Templates has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include Server-Side Request Forgery (SSRF).

None of the 2 issues recorded for Slider Templates have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nabil Irawan. Slider Templates is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.4.21.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage0%
Open

2

Fixed

0

Get automatic notifications for all Slider Templates vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-62988

Slider Templates <= 1.0.3 - Authenticated (Subscriber+) Server-Side Request Forgery

Read the full analysis

Vulnerability Records

2 records
Plugin Profile
Latestv1.0.3

Slider Templates

Codeless

Author

Codeless

1.0(3)
20/100
Last Updated
2023-01-14 (4y ago)
Active Installs
1,000+
Downloads
20,334
Requires WP
5.0+
Requires PHP
0+
Tested up to
WP 5.4.21
Created
2020-04-24 (7y ago)

Automatically import Slider Templates from slider-templates.com to your website with just one-click! This plugin is created for Slider-Templates.com users or Codeless Themes customers. If you are a Codeless theme customer you can automatically install templates without the need of ST account. To get full-access to templates you should have a ST account. With a FREE account you can download only 1 slider! Get premium account on slider-templates.com to access all sliders and import them automatically to your website. Slider-Template Service This plugin uses an external service, slider-templates.com but only in cases you consent the connection to Slider-Templates Server. Terms & Conditions – Privacy Policy Privacy Policy This plugin collects users information (IP, Location, Cookies) when the User consent it with the &#8216;CONNECT’ button or Sign In using Slider-templates.com Email & Password. Anytime users can block (disconnect) the plugin from communicating with Slider-Templates Server. When connecting or Sign In, plugin automatically connects with server to get templates and to identify which templates is allowed to be downloading from that user using the actual user level.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C