WP Smart Preloader

WP Smart Preloader has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for WP Smart Preloader has a vendor fix available, so running the current release closes it.

All of these findings were reported by Rio Darmawan. WP Smart Preloader is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSMedium

4.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP Smart Preloader vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2023-23675

WP Smart Preloader <= 1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2023-01-20 00:00	WP Smart Preloader <= 1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Smart Preloader <= 1.15	`CVE-2023-23675`	4.4 Medium	Rio Darmawan	Yes

Showing 1–1 of 1 reports

Latestv1.15.3

WP Smart Preloader

Author

catchsquare

4.4(25)

88/100

Last Updated

2024-10-27 (2y ago)

Active Installs

5,000+

Downloads

208,351

Requires WP

2.8+

Requires PHP

Tested up to

WP 6.6.7

Created

2015-12-18 (11y ago)

WP Smart Preloader is a Simple CSS spinners and throbbers made with CSS and minimal HTML markup. It offers visual feedback in the event of content being loaded, thereby managing expectations and reducing the chance of a user abandoning your wordpress website. You will find following features with this plugin: Full Responsive with Cross Broser compatible CSS only Preloader no Gif no Image Full Customize. Faster Loading Icon to circle No coding necessary. Activate it and play with its settings and you’re Good to go

View on WordPress.org