WordPress security by component

Hero Slider - WordPress Slider Plugin

Plugin description

Hero Slider - WordPress Slider Plugin is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 05, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: hero-slider-wordpress-slider-plugin

Latest vulnerability

CVE-2024-13809: Hero Slider - WordPress Slider Plugin: SQL injection

Hero Slider - WordPress Slider Plugin is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedMar 05, 2025

Safe version guidanceSee mitigation notes

		Safe version
Mar 05, 2025	CVE-2024-13809 Hero Slider - WordPress Slider Plugin: SQL injection Hero Slider - WordPress Slider Plugin is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE6.5 NVDPending