WordPress plugin

Slideshow security & vulnerabilities

Q: Is any Slideshow vulnerability listed in CISA KEV?

No. None of the known Slideshow vulnerabilities is currently listed in the CISA KEV catalog.

slideshow-jquery-image-gallery— active installsLast vulnerability May 9, 2022

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

3Known vulnerabilities

Critical0
High1
Medium2
Low0

Vulnerabilities per year

All Slideshow vulnerabilities

Slideshow vulnerabilities
Severity	Vulnerability	CVE	Published
High7.5	2.2.21 - Information Exposure 2.2.8 – 2.2.21Update to 2.2.22	CVE-2015-3634	May 2, 2015

High7.5
2.2.21 - Information Exposure
2.2.8 – 2.2.21Update to 2.2.22
CVE-2015-3634May 2, 2015

Slideshow: common questions

Does Slideshow have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in Slideshow: 1 high, 2 medium. At least one is not fixed in the latest version.

How do I check which version of Slideshow I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Slideshow vulnerability?

CVE-2022-1299, published May 9, 2022: Slideshow <= 2.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting. Severity: Medium (CVSS 4.8).

Is any Slideshow vulnerability listed in CISA KEV?

No. None of the known Slideshow vulnerabilities is currently listed in the CISA KEV catalog.