Slider Pro

Slider Pro has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Slider Pro has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Slider Pro is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Slider Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-57699

Slider Pro <= 4.8.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Slider Pro banner
Latestv4.8.14

Slider Pro

bqworks

Author

bqworks

5.0(12)
100/100
Last Updated
2026-06-27 (3mo ago)
Active Installs
4,000+
Downloads
69,943
Requires WP
4.0+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2021-07-14 (5y ago)

Slider Pro is a fully responsive and touch-enabled WordPress slider plugin that allows you to create professional and elegant sliders. This slider plugin was built with user experience in mind, providing a clean and intuitive user interface in the admin area and a smooth navigation experience for the end-users. See a few examples on the slider’s presentation page. Features: Fully responsive on any device Touch support for touch-enabled screens Set different configurations for the same slider, based on screen sizes (using breakpoints) Load images conditionally based on the size of the slider (different image sizes for different screen sizes) Animated and static layers, which can contain text, images or any HTML content Lightbox integration Full Width and Full Window support Carousel layout with looping/infinite scrolling Thumbnails that contain both images and text. Auto height based on inner content size Lazy loading for images Deep linking (link to specific slide inside the slider) Keyboard navigation Clean and intuitive admin interface Preview sliders directly in the admin area Drag and drop slide sorting for easy management of the slides’ order Publish sliders in any post (including pages and custom post types), in PHP code, and widget areas Caching system for quick loading times Optimized file loading. The JavaScript and CSS files are loaded only in pages where there are sliders Load images (e.g., featured images) and content dynamically, from posts (including custom post types), WordPress galleries and Flickr Action and filter hooks to add to the functionality of the slider Import and export sliders between different plugin installations These videos demonstrate the full capabilities of the plugin. Premium Add-ons allow you to further extend the functionality of the slider: Custom CSS and JavaScript: Allows you to add custom CSS and JavaScript code to your sliders in a syntax highlighting code editor. It also features a revisions system that will backup all your code edits, allow you to compare between multiple revisions and restore a certain revision. Revisions: Automatically stores a record of each edit/update of your sliders, for comparison or backup purposes. Each slider will have its own list of revisions, allowing you to easily preview a revision, analyze its settings, compare it to other revisions or restore it.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C