Medium · 5.4 CVE-2022-33943 EUVD-2022-36979GHSA-8fqx-rxr6-9fxc

WordPress BxSlider WP plugin <= 2.0.0 - Authenticated Cross-Site Scripting (XSS) vulnerability

Published Jul 27, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (contributor or higher user role) Cross-Site Scripting (XSS) vulnerability in Nico Amarilla's BxSlider WP plugin <= 2.0.0 at WordPress.

Vendor	Product	Affected	Fixed
Nico Amarilla	BxSlider WP (WordPress plugin)	<= 2.0.0 – ≤ 2.0.0	—