Product by BdThemes
Prime Slider – Addons For Elementor
19 known vulnerabilities in Prime Slider – Addons For Elementor (BdThemes), 0 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-109691 | BdThemes Prime Slider: Cross-site Scripting | 6.5 | |
| Medium | CVE-2026-105875 | BdThemes Prime Slider: Cross-site Scripting | 6.5 | |
| High | CVE-2024-32682 | WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability | 7.1 | |
| Medium | CVE-2026-4341 | BdThemes Prime Slider: Cross-site Scripting | 6.4 | |
| Medium | CVE-2022-4974 | Freemius SDK <= 2.4.2 - Missing Authorization Checks | 6.3 | |
| Medium | CVE-2024-1507 | BdThemes Prime Slider: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-8442 | BdThemes Prime Slider: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-30186 | WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability | 6.5 | |
| Medium | CVE-2024-4339 | BdThemes Prime Slider: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-1506 | BdThemes Prime Slider: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-1508 | BdThemes Prime Slider: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-5640 | BdThemes Prime Slider: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-12043 | BdThemes Prime Slider: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-3997 | BdThemes Prime Slider: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-14277 | BdThemes Prime Slider: Server-Side Request Forgery (SSRF) | 4.3 | |
| Medium | CVE-2024-1730 | BdThemes Prime Slider: Cross-site Scripting | 5.4 | |
| Medium | CVE-2025-68500 | BdThemes Prime Slider: Server-Side Request Forgery (SSRF) | 4.9 | |
| High | CVE-2024-32681 | WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability | 4.3 | |
| Medium | CVE-2024-24883 | WordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerability | 4.3 |