Medium · 5.4 CVE-2022-25609 EUVD-2022-30269GHSA-8h3v-2qpx-685j

WordPress Yoo Slider plugin <= 2.0.0 - Stored Cross-Site Scripting (XSS) vulnerability

Published Mar 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Yooslider Product: Yoo Slider – Image Slider & Video Slider (WordPress plugin) Category: Web / CMS

Description

Stored Cross-Site Scripting (XSS) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers with contributor or higher user role to inject the malicious code.

Affected products

Vendor	Product	Affected	Fixed
Yooslider	Yoo Slider – Image Slider & Video Slider (WordPress plugin)	<= 2.0.0 – ≤ 2.0.0	—

References

https://wordpress.org/plugins/yoo-slider/#developers
https://patchstack.com/database/vulnerability/yoo-slider/wordpress-yoo-slider-plugin-2-0-0-stored-cross-site-scripting-xss-vulnerability