Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-42700 EUVD-2026-92521GHSA-64m4-qw3q-867g

WordPress Image Slider Widget plugin <= 1.1.130 - Cross Site Scripting (XSS) vulnerability

Published Oct 5, 2026 · Updated Oct 5, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Image Slider Widget image-slider-widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.130.

Affected products

VendorProductAffectedFixed
GhozyLab Image Slider Widget ≤ 1.1.130 —

References