WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Slideshow Gallery LITE

Feature content in a JavaScript powered slideshow gallery showcase on your WordPress website.

18Reported vulnerabilities
9.9Highest CVSS score
1.8.6Latest version
5,000+Active installs

What to do now

Update Slideshow Gallery LITE to 1.8.6 or later. 18 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 10, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2014-5460 Medium 6.5 70.9% 1.4.6 and earlier
1.4 to 1.4 (inclusive)
1.4.1 to 1.4.1 (inclusive)
1.4.2 to 1.4.2 (inclusive)
1.4.3 to 1.4.3 (inclusive)
1.4.4 to 1.4.4 (inclusive)
1.4.5 to 1.4.5 (inclusive)		 1.4.7 September 11, 2014
CVE-2018-18018 Critical 9.8 2.2% 1.6.8 to 1.6.8 (inclusive) 1.6.9 April 15, 2019
CVE-2018-18019 Medium 6.1 1.0% 1.6.8 to 1.6.8 (inclusive) 1.6.9 April 15, 2019
CVE-2018-18017 Medium 6.1 1.0% 1.6.8 to 1.6.8 (inclusive) 1.6.9 April 15, 2019
CVE-2024-31355 Critical 9.9 0.5% 1.7.8 and earlier 1.7.9 April 7, 2024
CVE-2021-24882 Medium 4.8 0.6% Before 1.7.4 1.7.4 November 23, 2021
WF-01762804-df33-4c4d-b8f6-d94a1e5b5fc9 High 8.8 — 1.5.3.1 and earlier 1.5.3.2 August 20, 2015
CVE-2024-5543 High 8.1 0.5% 0 to 1.8.1 (inclusive)
0 to 1.8.1 (inclusive)		 1.8.2 June 12, 2024
CVE-2023-28491 Medium 6.5 0.8% 1.7.6 and earlier 1.7.7 March 15, 2023
CVE-2026-2021 Medium 6.4 0.2% 0 to 1.8.5 (inclusive) 1.8.6 June 18, 2026
CVE-2018-17946 Medium 6.1 0.8% Before 1.6.6.1 1.6.6.1 October 3, 2018
WF-b5ba2813-56ff-45d0-966a-f83da862ec13 Medium 6.1 — 1.6.5 and earlier 1.6.6 March 1, 2017
WF-7dc9c0ed-a77c-4ad8-8e6e-75c1a2998fe6 Medium 6.1 — 1.6 and earlier 1.6.1 March 21, 2016
WF-18aa817d-80e0-4c6f-852f-c8a91c9507c4 Medium 6.1 — Before 1.5.3.4 1.5.3.4 August 20, 2015
CVE-2024-31353 Medium 5.3 0.5% 1.8 and earlier 1.8.1 April 7, 2024
CVE-2024-47376 Medium 4.4 0.3% 1.8.3 and earlier 1.8.4 September 30, 2024
CVE-2024-31354 Medium 4.3 0.2% 1.7.8 and earlier 1.7.9 April 7, 2024
CVE-2023-28497 Medium 4.3 0.3% 1.7.6 and earlier 1.7.7 March 15, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.