Skip to content
OpenAdvisories

Product · Quantum Cloud

Slider Hero with Video Background, Animation

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-17582

    Slider Hero with Video Background, Animation <= 9.1.7 - Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate)

    The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7 via the qcld_sliderhero_duplicate() function. Slide data (description, title, btn, btn2, image_link, custom, etc.) is stored safely via $w…

    Quantum Cloud Slider Hero with Video Background, Animation Web / CMS
  • Medium 4.3
    CVE-2021-4424

    Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypass

    The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0. This is due to missing or incorrect nonce validation on the qc_slider_hero_duplicate() function. This makes it possible for unauthenticat…

    Quantum Cloud Slider Hero with Video Background, Animation Web / CMS