6.5
Medium
CVE-2026-109691 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 4.7.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Prime Slider – Addons For Elementor 4.7 | earliest → 4.7.1 | No fix stated |
Other CVEs of Prime Slider – Addons For Elementor
The 19 CVEs of Prime Slider – Addons For Elementor →
CVE-2026-105875
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime…
6.5
Medium
CVE-2026-4341
The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
6.4
Medium
CVE-2025-68500
Server-Side Request Forgery (SSRF) vulnerability in bdthemes Prime Slider – Addons For Elementor…
4.9
Medium
CVE-2025-14277
The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all…
4.3
Medium