Slivery Extender
Slivery Extender has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Code Injection, behind 1 of the records (100%).
The one issue recorded for Slivery Extender has a vendor fix available, so running the current release closes it.
All of these findings were reported by LVT-tholv2k. Slivery Extender is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-27191Slivery Extender <= 1.0.2 - Authenticated(Contributor+) Remote Code Execution via shortcode
Read the full analysisVulnerability Records
Slivery Extender
Author
inpersttion
For using this plugin you can use themes customizer quicker & more easily.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C