Prime Slider Addons for Elementor

Vulnerabilities 21Slug bdthemes-prime-slider-liteLatest version 4.2.1WordPress.org →

Minimum safe version

4.1.11

Update to 4.1.11 or later to address 21 fixable vulnerabilities

Latest available4.2.1 ✓

N/A

2026-04-07< 4.1.11

Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter

Wordfence CVE

Medium 4.9

2025-12-24< 4.1.0

CVE-2025-68500

CVE Wordfence

Medium 4.3

2025-12-18< 4.1.0

CVE-2025-14277

CVE Wordfence

Medium 6.4

2025-01-23< 3.16.6

CVE-2024-12043

CVE Patchstack Wordfence

Medium 6.3

2024-10-16< 2.7.0

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE

Medium 5.4

2024-11-07< 3.15.19

CVE-2024-8442

CVE Patchstack Wordfence

Medium 5.4

2024-06-07< 3.14.8

CVE-2024-5640

CVE Patchstack Wordfence

Medium 5.4

2024-05-23< 3.14.2

CVE-2024-3997

CVE Wordfence

Medium 5.4

2024-05-09< 3.14.4

CVE-2024-4339

CVE Wordfence Patchstack

High 8.8

2024-04-22< 3.13.3

CVE-2024-32682

CVE Patchstack Wordfence

High 8.8

2024-04-22< 3.13.3

CVE-2024-32681

CVE Patchstack Wordfence

Medium 5.4

2024-04-22< 3.14.1

WordPress Prime Slider – Addons For Elementor Plugin <= 3.14.0 is vulnerable to Cross Site Scripting (XSS)

Patchstack CVE Wordfence

Medium 6.5

2024-03-27< 3.13.2

CVE-2024-30186

CVE Wordfence Patchstack

Medium 5.4

2024-03-13< 3.13.4

CVE-2024-1507

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-03-13< 3.13.3

CVE-2024-1508

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-03-07< 3.13.2

CVE-2024-1506

CVE Wordfence WPScan

Medium 4.3

2024-03-21< 3.11.11

CVE-2024-24883

CVE Wordfence Patchstack WPScan

N/A

2023-07-18< 3.8.3

WordPress Prime Slider – Addons For Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Scripting (XSS)

Patchstack WPScan CVE

N/A

2022-03-04< 2.7.0

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence

N/A

2022-02-28< 2.7.0

WordPress Prime Slider – Addons For Elementor plugin <= 2.6.2 - Sensitive Information Disclosure vulnerability

Patchstack

N/A

2022-02-28< 2.7.0

WordPress Prime Slider – Addons For Elementor plugin <= 2.6.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack