VulnTitan VulnTitan Security command center
Plugin Vulnerability Hub
Plugin 16 known issues Latest disclosed Apr 07, 2026

Prime Slider Addons for Elementor Vulnerabilities

Review known vulnerability records for the WordPress plugin Prime Slider Addons for Elementor (`bdthemes-prime-slider-lite`), including severity, CVE references, affected versions, and patch status.

Recent tracked CVEs on this page include CVE-2026-4341, CVE-2025-14277 and CVE-2025-68500, so operators can jump from disclosure to patch validation without scanning the full feed first.

View on WordPress.org Back to Feed
Known Records
16
High or Critical
0
Patch Coverage
100%
Last Updated
Apr 08, 2026
Related Security Guides

Use these guides while reviewing Prime Slider Addons for Elementor fixes

Pair this plugin vulnerability hub with practical WordPress hardening, scanner, and patch workflow guidance.

Hardening
WordPress hardening checklist for exposed plugins

Review patch cadence, privileged access, XML-RPC exposure, backups, and monitoring controls.
Plugin Security
WordPress plugin security basics for patch decisions

Use ownership, update testing, least privilege, and removal criteria to reduce plugin risk.
Scanning
WordPress vulnerability scanner buyer's guide

Compare scanner coverage for plugin CVEs, version detection, alert noise, and remediation workflow.
Patch Decision Workflow

How to prioritize Prime Slider Addons for Elementor remediation

Use the hub as a decision layer before opening individual records: confirm whether the issue has a CVE, whether a fixed version exists, and whether the affected range overlaps production installs.

Search-Ready Records
14
1. Match the Package
Confirm the installed WordPress plugin slug is bdthemes-prime-slider-lite before acting on any CVE from this cluster.
2. Sort by Severity
Start with 0 high or critical records, then review medium and unrated findings with public references.
3. Check Patch Evidence
16 records include a patch path; verify compatibility before closing the finding.
4. Monitor Gaps
0 records still lack a listed fixed release, so keep this hub in the review queue.
High-Signal Remediation Targets
CVE-2026-4341 Medium
Stored Cross-Site Scripting remediation for Prime Slider Addons for Elementor

Affected range: Versions up to 4.1.10. Fixed version: 4.1.11.

CVE-2025-68500 Medium
Server-Side Request Forgery remediation for Prime Slider Addons for Elementor

Affected range: Versions up to 4.0.10. Fixed version: 4.1.0.

CVE-2024-12043 Medium
Stored Cross-Site Scripting remediation for Prime Slider Addons for Elementor

Affected range: Versions up to 3.16.5. Fixed version: 3.16.6.

CVE-2024-8442 Medium
Stored Cross-Site Scripting remediation for Prime Slider Addons for Elementor

Affected range: Versions up to 3.15.18. Fixed version: 3.15.19.

Priority CVE Quick Links

Fast paths into Prime Slider Addons for Elementor CVE reports

Start with the highest-signal CVE records for this WordPress plugin before scanning the full vulnerability feed.

Indexed CVEs
16
Tracked CVE Issue Type Affected Versions Fixed Version CVSS
CVE-2026-4341
Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting vi...
 Stored Cross-Site Scripting Versions up to 4.1.10 4.1.11 CVSS 6.4
CVE-2025-68500
Prime Slider – Addons For Elementor <= 4.0.10 - Authenticated (Subscriber+) Server-S...
 Server-Side Request Forgery Versions up to 4.0.10 4.1.0 CVSS 6.4
CVE-2024-12043
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce...
 Stored Cross-Site Scripting Versions up to 3.16.5 3.16.6 CVSS 6.4
CVE-2024-8442
Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce...
 Stored Cross-Site Scripting Versions up to 3.15.18 3.15.19 CVSS 6.4
CVE-2024-5640
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce...
 Stored Cross-Site Scripting Versions up to 3.14.7 3.14.8 CVSS 6.4
CVE-2024-3997
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce...
 Stored Cross-Site Scripting Versions up to 3.14.1 3.14.2 CVSS 6.4
CVE-2024-4339
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce...
 Stored Cross-Site Scripting Versions up to 3.14.3 3.14.4 CVSS 6.4
CVE-2024-30186
Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored...
 Stored Cross-Site Scripting Versions up to 3.13.1 3.13.2 CVSS 6.4
CVE-2026-4341 Medium 4.1.11
CVE-2026-4341 Prime Slider Addons for Elementor Stored Cross-Site Scripting

Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter

CVE-2025-68500 Medium 4.1.0
CVE-2025-68500 Prime Slider Addons for Elementor Server-Side Request Forgery

Prime Slider – Addons For Elementor <= 4.0.10 - Authenticated (Subscriber+) Server-Side Request Forgery

CVE-2024-12043 Medium 3.16.6
CVE-2024-12043 Prime Slider Addons for Elementor Stored Cross-Site Scripting

Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

CVE-2024-8442 Medium 3.15.19
CVE-2024-8442 Prime Slider Addons for Elementor Stored Cross-Site Scripting

Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget

CVE-2024-5640 Medium 3.14.8
CVE-2024-5640 Prime Slider Addons for Elementor Stored Cross-Site Scripting

Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget

CVE-2024-3997 Medium 3.14.2
CVE-2024-3997 Prime Slider Addons for Elementor Stored Cross-Site Scripting

Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagepiling Widget

CVE-2024-4339 Medium 3.14.4
CVE-2024-4339 Prime Slider Addons for Elementor Stored Cross-Site Scripting

Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

CVE-2024-30186 Medium 3.13.2
CVE-2024-30186 Prime Slider Addons for Elementor Stored Cross-Site Scripting

Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via title

Coverage Snapshot

What this page helps you verify fast

This hub clusters tracked records for Prime Slider Addons for Elementor so operators can confirm whether a disclosed issue maps to the installed slug, version range, and patch path.

Patch Visibility
16 records include a published patch path, leaving 0 with no listed safe release yet.
Severity Mix
0 critical and 0 high severity findings.
Recent CVEs
CVE-2026-4341, CVE-2025-14277 and CVE-2025-68500
Reference Workflow
Jump from the hub into the full report when you need remediation notes, exploit context, CVSS vectors, or source references.
Triage First

Open the records most likely to drive action

These recent records surface the CVE strings, patch cues, and direct report links most operators need first.

Known Vulnerabilities

Reports for Prime Slider Addons for Elementor

Sorted by latest disclosure date so newly published issues surface first.

Plugin Medium Patched: Yes CVE-2026-4341
CVE-2026-4341: Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'follow_us_text' setting of the Mount widget in all versions up to, and including, 4.1.10. This is due to insufficient input sanitization and output escaping. Specifi...

Published
Apr 07, 2026
Patched Release
4.1.11
Affected Versions
Versions up to 4.1.10
Next Step
Update to 4.1.11 or newer if supported.
Review CVE-2026-4341 fixed version details Open CVE Reference
Plugin Medium Patched: Yes CVE-2025-14277
CVE-2025-14277: Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the import_elementor_template AJAX action. This makes it possible for authenticated attackers, with subscriber level access an...

Published
Dec 17, 2025
Patched Release
4.1.0
Affected Versions
Versions up to 4.0.9
Next Step
Update to 4.1.0 or newer if supported.
Review CVE-2025-14277 fixed version details Open CVE Reference
Plugin Medium Patched: Yes CVE-2025-68500
CVE-2025-68500: Prime Slider – Addons For Elementor <= 4.0.10 - Authenticated (Subscriber+) Server-Side Request Forgery

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.10. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary lo...

Published
Dec 13, 2025
Patched Release
4.1.0
Affected Versions
Versions up to 4.0.10
Next Step
Update to 4.1.0 or newer if supported.
Review CVE-2025-68500 fixed version details Open CVE Reference
Plugin Medium Patched: Yes CVE-2024-12043
CVE-2024-12043: Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Post Slider and Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'social_link_title' parameter of the 'blog' widget in all versions up to, and including, 3.16....

Published
Jan 22, 2025
Patched Release
3.16.6
Affected Versions
Versions up to 3.16.5
Next Step
Update to 3.16.6 or newer if supported.
Review CVE-2024-12043 fixed version details Open CVE Reference
Plugin Medium Patched: Yes CVE-2024-8442
CVE-2024-8442: Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Blog widget in all versions up to, and including, 3.15.18 due to insufficient input sanitization and...

Published
Nov 06, 2024
Patched Release
3.15.19
Affected Versions
Versions up to 3.15.18
Next Step
Update to 3.15.19 or newer if supported.
Review CVE-2024-8442 fixed version details Open CVE Reference
Plugin Medium Patched: Yes CVE-2024-5640
CVE-2024-5640: Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficient inpu...

Published
Jun 06, 2024
Patched Release
3.14.8
Affected Versions
Versions up to 3.14.7
Next Step
Update to 3.14.8 or newer if supported.
Review CVE-2024-5640 fixed version details Open CVE Reference
Plugin Medium Patched: Yes CVE-2024-3997
CVE-2024-3997: Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagepiling Widget

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pagepiling widget in all versions up to, and including, 3.14.1 due to insufficient input sanitization...

Published
May 22, 2024
Patched Release
3.14.2
Affected Versions
Versions up to 3.14.1
Next Step
Update to 3.14.2 or newer if supported.
Review CVE-2024-3997 fixed version details Open CVE Reference
Plugin Medium Patched: Yes CVE-2024-4339
CVE-2024-4339: Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the General widget in all versions up to, and including, 3.14.3 due to insufficient input sanitization and output...

Published
May 07, 2024
Patched Release
3.14.4
Affected Versions
Versions up to 3.14.3
Next Step
Update to 3.14.4 or newer if supported.
Review CVE-2024-4339 fixed version details Open CVE Reference
Plugin Medium Patched: Yes CVE-2024-1730
CVE-2024-1730: Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via urls in link fields, images from URLs, and html tags...

Published
Apr 19, 2024
Patched Release
3.14.1
Affected Versions
Versions up to 3.14.0
Next Step
Update to 3.14.1 or newer if supported.
Review CVE-2024-1730 fixed version details Open CVE Reference
Plugin Low Patched: Yes CVE-2024-32681
CVE-2024-32681: Prime Slider – Addons For Elementor <= 3.13.2 - Missing Authorization

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the dci_sdk_insights, dci_sdk_dismiss_notice, and rc_sdk_dismiss_notice functions in versions up to, and including, 3.13.2. This makes it possibl...

Published
Apr 17, 2024
Patched Release
3.13.3
Affected Versions
Versions up to 3.13.2
Next Step
Update to 3.13.3 or newer if supported.
Review CVE-2024-32681 fixed version details Open CVE Reference
Plugin Medium Patched: Yes CVE-2024-32682
CVE-2024-32682: Prime Slider – Addons For Elementor <= 3.13.2 - Missing Authorization to Notice Dismissal

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the dismiss() function in versions up to, and including, 3.13.2. This makes it possible for authenticated attackers, with subscriber-level access...

Published
Apr 17, 2024
Patched Release
3.13.3
Affected Versions
Versions up to 3.13.2
Next Step
Update to 3.13.3 or newer if supported.
Review CVE-2024-32682 fixed version details Open CVE Reference
Plugin Medium Patched: Yes CVE-2024-30186
CVE-2024-30186: Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via title

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the title tag in versions up to, and including, 3.13.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

Published
Mar 25, 2024
Patched Release
3.13.2
Affected Versions
Versions up to 3.13.1
Next Step
Update to 3.13.2 or newer if supported.
Review CVE-2024-30186 fixed version details Open CVE Reference