WP Smart Flexslider
WP Smart Flexslider has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WP Smart Flexslider has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Xuan Chien. WP Smart Flexslider is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.8.30.
CVE-2025-49955Smart Flexslider <= 2.5 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
WP Smart Flexslider
Author
Rajan Vijayan
This is Bootstrap Flex Slider plugin. Its used for Bootstrap v3.3.7x Themes. Its have admin controls options, Navigation and Directions options in admin panel. Now its also works not bootstrap themes Custom Options 1. Install Plugin 2. Add slider and use short code [display_flexslider id="SLIDER ID"] Frequently Asked Questions Which version bootstrap theme required for this plugin? Bootstrap 3.3.7 or later Its required any JS or CSS file? No, Not needed. Its working on Bootstrap default JS and Css http://getbootstrap.com/javascript/#carousel
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C