WordPress plugin
Wonder Slider Lite security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All Wonder Slider Lite vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Dom-based Stored Cross-Site Scripting ≤14.4Update to 14.5 | CVE-2025-7501 | |
| Medium6.1 | Reflected Cross-Site Scripting via 'page' ≤13.9Update to 14.0 | CVE-2024-24877 |
- Medium6.4Authenticated (Contributor+) Dom-based Stored Cross-Site Scripting
≤14.4Update to 14.5
- Medium6.1Reflected Cross-Site Scripting via 'page'
≤13.9Update to 14.0
Wonder Slider Lite: common questions
Does Wonder Slider Lite have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Wonder Slider Lite: 2 medium. None are known to affect version null.
How do I check which version of Wonder Slider Lite I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Wonder Slider Lite vulnerability?
CVE-2025-7501, published Jul 25, 2025: Wonder Slider Lite & Wonder Slider <= 14.4 - Authenticated (Contributor+) Dom-based Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Wonder Slider Lite vulnerability listed in CISA KEV?
No. None of the known Wonder Slider Lite vulnerabilities is currently listed in the CISA KEV catalog.