WordPress plugin

Slide Anything – Responsive Content / HTML Slider and Carousel security & vulnerabilities

Q: Does Slide Anything – Responsive Content / HTML Slider and Carousel have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in Slide Anything – Responsive Content / HTML Slider and Carousel: 3 medium. None are known to affect version null.

Q: How do I check which version of Slide Anything – Responsive Content / HTML Slider and Carousel I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent Slide Anything – Responsive Content / HTML Slider and Carousel vulnerability?

CVE-2023-28499, published Mar 15, 2023: Slide Anything <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).

Q: Is any Slide Anything – Responsive Content / HTML Slider and Carousel vulnerability listed in CISA KEV?

No. None of the known Slide Anything – Responsive Content / HTML Slider and Carousel vulnerabilities is currently listed in the CISA KEV catalog.

slide-anything— active installsLast vulnerability Mar 15, 2023

No known unpatched vulnerabilities in the latest version

All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

3Known vulnerabilities

Critical0
High0
Medium3
Low0

Vulnerabilities per year

All Slide Anything – Responsive Content / HTML Slider and Carousel vulnerabilities

Slide Anything – Responsive Content / HTML Slider and Carousel vulnerabilities
Severity	Vulnerability	CVE	Published
Medium6.4	Authenticated (Author+) Stored Cross-Site Scripting ≤2.4.7Update to 2.4.9	CVE-2023-28499	Mar 15, 2023
Medium5.5	Authenticated (Admin+) Stored Cross-Site Scripting ≤2.3.46Update to 2.3.47	CVE-2022-2413	Jul 6, 2022
Medium5.5	Editor+ Cross-Site Scripting <2.3.44Update to 2.3.44	CVE-2022-1303	Apr 18, 2022

Medium6.4
Authenticated (Author+) Stored Cross-Site Scripting
≤2.4.7Update to 2.4.9
CVE-2023-28499Mar 15, 2023
Medium5.5
Authenticated (Admin+) Stored Cross-Site Scripting
≤2.3.46Update to 2.3.47
CVE-2022-2413Jul 6, 2022
Medium5.5
Editor+ Cross-Site Scripting
<2.3.44Update to 2.3.44
CVE-2022-1303Apr 18, 2022

Slide Anything – Responsive Content / HTML Slider and Carousel: common questions

Does Slide Anything – Responsive Content / HTML Slider and Carousel have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in Slide Anything – Responsive Content / HTML Slider and Carousel: 3 medium. None are known to affect version null.

How do I check which version of Slide Anything – Responsive Content / HTML Slider and Carousel I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Slide Anything – Responsive Content / HTML Slider and Carousel vulnerability?

CVE-2023-28499, published Mar 15, 2023: Slide Anything <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).

Is any Slide Anything – Responsive Content / HTML Slider and Carousel vulnerability listed in CISA KEV?

No. None of the known Slide Anything – Responsive Content / HTML Slider and Carousel vulnerabilities is currently listed in the CISA KEV catalog.