Slider Responsive Slideshow Vulnerabilities

[en] Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object Injection.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through <= 1.5.4.

Affected:

up to 1.5.4

Fix:

No patched version reported

Disclosed:

Feb 20, 2026

CVE-2026-22346 on NVD →

The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.4 via deserialization of untrusted input. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a PHP Object...

CVSS:

7.5

Affected:

up to 1.5.4

Fix:

No patched version reported

Disclosed:

Feb 11, 2026

CVE-2026-22346 on NVD →

[en] Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0.

Affected:

up to 1.4.2

Fixed in:

1.4.2

Disclosed:

Jun 10, 2024

CVE-2024-35722 on NVD →

The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the _ajax_slide_responsive and _sr_save_settings functions in versions up to, and including, 1.4.0. This makes it possible for authenticated att...

CVSS:

4.3

Affected:

up to 1.4.0

Fixed in:

1.4.2

Disclosed:

Jun 6, 2024

CVE-2024-35722 on NVD →

[en] The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.8 via deserialization of untrusted input to the awl_slider_responsive_shortcode function. This makes it possible for authenticated attackers, with c...

Affected:

up to 1.4.0

Fixed in:

1.4.0

Disclosed:

Mar 1, 2024

CVE-2024-1859 on NVD →

The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.8 via deserialization of untrusted input to the awl_slider_responsive_shortcode function. This makes it possible for authenticated attackers, with contri...

CVSS:

8.8

Affected:

up to 1.3.8

Fixed in:

1.4.0

Disclosed:

Feb 29, 2024

CVE-2024-1859 on NVD →