SlideCraft – Responsive Slider & Carousel
SlideCraft – Responsive Slider & Carousel has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for SlideCraft – Responsive Slider & Carousel has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Xuan Chien. SlideCraft – Responsive Slider & Carousel is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-49955Smart Flexslider <= 2.5 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

SlideCraft – Responsive Slider & Carousel
Author
Rajan Vijayan
SlideCraft builds sliders and carousels that look good, load fast and work for everyone. Make a slider once and place it anywhere with the SlideCraft Slider block, the [slidecraft] shortcode or a PHP function. SlideCraft is the new version of WP Smart Flexslider. Your existing sliders are moved over automatically and your old shortcodes keep working. Slider types and effects Slider, carousel (several slides per view, rows, centred mode, free scrolling), gallery with thumbnails, and continuous ticker. Slide, fade, coverflow, cube, flip, cards and creative transitions. Horizontal or vertical, loop, random order, autoplay with a progress bar, keyboard, mousewheel and touch. Slides and layers Image, video (YouTube, Vimeo or MP4), content, testimonial, logo and dynamic posts slides. Image, colour, gradient or video backgrounds with a focal point, Ken Burns zoom and a colour overlay. Heading, text, button, image and countdown layers on a nine-point grid, with per-device visibility and entrance animations. Dynamic slides from posts, pages, custom post types or WooCommerce products, filtered by category, tag, featured or sticky. Visual builder A slider library with search, duplicate, export and import. A live preview that uses your real site: click a layer to edit it, drag it to move it, and check desktop, tablet and mobile. Drag-and-drop slides and layers, autosave, undo/redo and saved versions you can restore. Design 12 starter templates: Hero Fade, Split Hero, Promo Countdown, Fullscreen Video, Blog Carousel, Product Showcase, Coverflow Portfolio, Cards Stack, Testimonials, Logo Ticker, News Ticker and Gallery + Thumbnails. Height by aspect ratio, fixed pixels, viewport height or the first image. Six arrow styles, bullets, fraction, progress bar or thumbnails. Separate tablet and mobile settings for slides per view, gap, height, text size and arrows. Fast and accessible About 32 KB of JavaScript (gzipped). Effects load only where they are used, and nothing loads on pages without a slider. Space is reserved before images load, so the page doesn’t jump. The first image loads with high priority and the rest lazy-load with responsive sizes. Accessible carousel markup, a pause button whenever autoplay is on, pause on focus, keyboard support and reduced-motion support. YouTube (no-cookie) and Vimeo (do not track) videos load only when their slide is shown.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C