Ht Slider For Elementor Vulnerabilities

The HT Slider for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slide_title' parameter in all versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping in JavaScript. This makes it possible for authenticated attackers, with Contributor-level a...

CVSS:

6.4

Affected:

up to 1.7.4

Fixed in:

1.7.5

Disclosed:

Dec 12, 2025

CVE-2025-14278 on NVD →

The HT Slider For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts i...

CVSS:

6.4

Affected:

up to 1.6.5

Fixed in:

1.6.6

Disclosed:

Jun 27, 2025

CVE-2025-53199 on NVD →

The HT Slider For Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.9. This is due to missing or incorrect nonce validation on the 'plugin_activation' function. This makes it possible for unauthenticated attackers to activate arbitrary plugins already insta...

CVSS:

4.3

Affected:

up to 1.3.9

Fixed in:

1.4.0

Disclosed:

Feb 28, 2023

CVE-2023-0495 on NVD →