Slider Templates
Slider Templates has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include Server-Side Request Forgery (SSRF).
None of the 2 issues recorded for Slider Templates have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nabil Irawan. Slider Templates is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.4.21.
CVE-2025-62988Slider Templates <= 1.0.3 - Authenticated (Subscriber+) Server-Side Request Forgery
Read the full analysisVulnerability Records
Slider Templates
Author
Codeless
Automatically import Slider Templates from slider-templates.com to your website with just one-click! This plugin is created for Slider-Templates.com users or Codeless Themes customers. If you are a Codeless theme customer you can automatically install templates without the need of ST account. To get full-access to templates you should have a ST account. With a FREE account you can download only 1 slider! Get premium account on slider-templates.com to access all sliders and import them automatically to your website. Slider-Template Service This plugin uses an external service, slider-templates.com but only in cases you consent the connection to Slider-Templates Server. Terms & Conditions – Privacy Policy Privacy Policy This plugin collects users information (IP, Location, Cookies) when the User consent it with the ‘CONNECT’ button or Sign In using Slider-templates.com Email & Password. Anytime users can block (disconnect) the plugin from communicating with Slider-Templates Server. When connecting or Sign In, plugin automatically connects with server to get templates and to identify which templates is allowed to be downloading from that user using the actual user level.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C