Skip to content
OpenAdvisories

Vendor

bqworks

9 known vulnerabilities.

Products

Accordion Slider 4 Slider Pro 2 Slider Pro Lite 1 Grid Accordion Lite 1 Accordion Slider Lite 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-66092

    WordPress Accordion Slider plugin <= 1.9.13 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bqworks Accordion Slider accordion-slider allows Stored XSS.This issue affects Accordion Slider: from n/a through <= 1.9.13.

    bqworks Accordion Slider
  • Medium 6.4
    CVE-2024-11892

    Accordion Slider Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Accordion Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'accordion_slider' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied a…

    bqworks Accordion Slider Lite Web / CMS
  • Medium 6.4
    CVE-2024-11874

    Grid Accordion Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Grid Accordion Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'grid_accordion' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attri…

    bqworks Grid Accordion Lite Web / CMS
  • Medium 6.4
    CVE-2024-11899

    Slider Pro Lite <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Slider Pro Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sliderpro' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. Th…

    bqworks Slider Pro Lite Web / CMS
  • Medium 4.3
    CVE-2023-41865

    WordPress Slider Pro plugin <= 4.8.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in bqworks Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Pro: from n/a through 4.8.6.

    bqworks Slider Pro
  • Medium 4.3
    CVE-2023-40331

    WordPress Accordion Slider plugin <= 1.9.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in bqworks Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion Slider: from n/a through 1.9.6.

    bqworks Accordion Slider
  • Medium 6.4
    CVE-2024-5020

    Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

    Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in various versions due to insufficient input sanitization and output escaping on user supplied attribu…

    smub 10web jetmonsters Extend Themes Web / CMS
  • Medium 6.4
    CVE-2024-9582

    Accordion Slider <= 1.9.11 - Authenticted (Contributor+) Stored Cross-Site Scripting via HTML Attribute

    The Accordion Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘html’ attribute of an accordion slider in all versions up to, and including, 1.9.11 due to insufficient input sanitization and output escaping. This makes it possi…

    bqworks Accordion Slider Web / CMS