Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-109691 EUVD-2026-98360GHSA-pwwj-rx47-x64x

WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability

Published Oct 13, 2026 · Updated Oct 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 4.7.1.

Affected products

VendorProductAffectedFixed
BdThemes Prime Slider – Addons For Elementor ≤ 4.7.1 —

References