Responsive Thumbnail Slider

Responsive Thumbnail Slider has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; all 7 are fixed as of October 2026. Their average CVSS score is 6.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2023 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (57%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection.

Every one of the 7 issues recorded for Responsive Thumbnail Slider has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, most of them (2) reported by Ala Arfaoui.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Responsive Thumbnail Slider vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2015-10144

Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

7 records


2026-07-31 19:57	Responsive Thumbnail Slider < 1.1.53 - Reflected Cross-Site Scripting via 'id' Parameter Responsive Thumbnail Slider < 1.1.53	`CVE-2026-18344`	6.1 Medium	Wordfence PRISM	Yes
2025-03-14 00:00	Thumbnail carousel slider <= 1.0.4 - Authenticated (Admin+) SQL Injection Responsive Thumbnail Slider <= 1.0.4	`CVE-2019-25222`	4.9 Medium	Ala Arfaoui	Yes
2023-10-26 00:00	Thumbnail carousel slider <= 1.0 - Cross-Site Request Forgery to Mass Slider Deletion Responsive Thumbnail Slider 1.0	`CVE-2023-5821`	4.3 Medium	Ala Arfaoui	Yes
2023-04-18 00:00	Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting Responsive Thumbnail Slider < 1.1.10	`CVE-2023-1915`	6.1 Medium	Chien Vuong	Yes
2023-04-17 00:00	Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting Responsive Thumbnail Slider <= 1.1.9	`CVE-2023-2120`	6.1 Medium	Marco Wotschka	Yes
2020-12-28 00:00	Thumbnail carousel slider < 1.0.1 - Stored Cross-Site Scripting and Cross-Site Request Forgery Responsive Thumbnail Slider < 1.0.1	`N/A`	7.1 High	Arash Khazaei	Yes
2015-08-29 00:00	Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload Responsive Thumbnail Slider < 1.0.1	`CVE-2015-10144`	8.8 High	Arash Khazaei	Yes

Showing 1–7 of 7 reports