Slider Hero

Vendor:

First CVE: Aug 23, 2021 · Active for 4 years

4
Total CVEs
More Total CVEs than 72% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
6.0
Avg CVSS
Higher Avg CVSS than 20% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Slider Hero over time

Volume of CVEsAvg CVSS Base Score
First CVE
Aug 23, 2021
4 years ago
Most Recent CVE
Mar 27, 2024
849 days ago

CVE Severity & Scoring

Slider Hero4 CVEs
All CVEs352,231 CVEs
MediumHigh
Attack Vector
Local0 (0.0%)
Network4 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (25.0%)
Unknown0 (0.0%)
Required3 (75.0%)
Privileges Required
Low1 (25.0%)
High2 (50.0%)
None1 (25.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (4 CVEs).

4 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin before 8.2.7 does not sanitise or escape the id attribute of its hero-button shortcode before using
Aug 23, 20218.827NONO
The Slider Hero WordPress plugin before 8.4.4 does not escape the slider Name, which could allow high-privileged users to perform Cross-Site Scripting attacks.
Sep 26, 20224.819NONO
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Quantum Cloud Slider Hero allows Stored XSS.This issue affects Slider Hero: fr
Mar 27, 20245.918NONO
The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0. This is due to missing or incorrect nonce validation on th
Jul 12, 20234.315NONO

Exploit Exposure

Signals from CVEs in this product scope (4 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (4 CVEs).

Media Mentions

Signals from CVEs in this product scope (4 CVEs).

Top CNAs Publishing CVEs For Slider Hero

Top CWEs

Versions

No cataloged versions.