Wonder Slider Lite

Wonder Slider Lite has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Wonder Slider Lite has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Wonder Slider Lite is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Wonder Slider Lite vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-7501

Wonder Slider Lite & Wonder Slider <= 14.4 - Authenticated (Contributor+) Dom-based Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Wonder Slider Lite banner
Latestv14.5

Wonder Slider Lite

WonderPlugin

Author

WonderPlugin

4.2(24)
84/100
Last Updated
2025-07-18 (1y ago)
Active Installs
8,000+
Downloads
216,962
Requires WP
3.6+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2016-02-02 (11y ago)

WonderPlugin Slider is the best and easiest way to create image slider, video slider and WordPress posts slider. The plugin supports images, YouTube, Vimeo, mp4/webm videos and WordPress posts. It’s fully responsive, mobile friendly and is compatible with iPhone, iPad and Android. It also includes stunning 3D transition effects and built-in Lightbox gallery. Features Support images, Mp4/WebM videos, YouTube, Vimeo and WordPress posts Fully responsive and mobile friendly, compatible with iPhone, iPad and Android Full width slider Stunning 3D transition effects Built-in Lightbox gallery Multiple sliders on one web page Step by step wizard-style user interface Display slider in WordPress widget Upgrade to Commercial Version Unlock all 31 professional skins with horizontal and vertical thumbnail navigation Technical support

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C