Medium · 6.5 CVE-2024-33938 EUVD-2024-34519GHSA-5fj3-qh5c-64g3

WordPress Sliding Widgets plugin <= 1.5.0 - Broken Access Control to XSS vulnerability

Published May 2, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: codename065 Product: Sliding Widgets

Description

Missing Authorization vulnerability in codename065 Sliding Widgets allows Cross-Site Scripting (XSS).This issue affects Sliding Widgets: from n/a through 1.5.0.

Affected products

Vendor	Product	Affected	Fixed
codename065	Sliding Widgets	≤ 1.5.0	—

References

https://patchstack.com/database/vulnerability/sliding-widgets/wordpress-sliding-widgets-plugin-1-5-0-broken-access-control-to-xss-vulnerability?_s_id=cve vdb-entry