Known vulnerabilities in Image Slider

Image Slider - The best and very easy slider plugin for your post, page or sidebar. 100% Responsive.

4Reported vulnerabilities

9.8Highest CVSS score

1.1.127Latest version

4,000+Active installs

What to do now

Update Image Slider to 1.1.127 or later. 4 of these have a fixed version available. Updating resolves them.

Plugin last updated: December 2, 2025 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
WF-607c20b1-f8da-4f3f-a070-abdae64c8fc8	Critical 9.8	—	1.1.95 and earlier	`1.1.97`	January 28, 2018
WF-005234f9-8ae2-455a-8dcd-5d29a6051270	High 8.8	—	1.1.119 and earlier	`1.1.121`	May 24, 2022
WF-57837060-433f-471c-9413-6d9b95b69f2a	High 8.1	—	Before 1.1.90	`1.1.90`	December 23, 2016
CVE-2024-32707	Medium 4.4	0.3%	1.1.125 and earlier	`1.1.127`	April 22, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.