Medium · 5.9 CVE-2025-60133 EUVD-2025-31269GHSA-6hjm-mp5m-c5rc

WordPress PE Easy Slider Plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

Published Sep 26, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: dj-extensions.com Product: PE Easy Slider

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DJ-Extensions.com PE Easy Slider pe-easy-slider allows Stored XSS.This issue affects PE Easy Slider: from n/a through <= 1.1.0.

Affected products

Vendor	Product	Affected	Fixed
DJ-Extensions.com	PE Easy Slider	≤ 1.1.0	—

References

https://patchstack.com/database/Wordpress/Plugin/pe-easy-slider/vulnerability/wordpress-pe-easy-slider-plugin-1-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry