Soliloquy Lite Vulnerabilities

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via the map_meta_cap. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract draft slider metad...

CVSS:

4.3

Affected:

up to 2.8.1

Fixed in:

2.8.2

Disclosed:

May 21, 2026

CVE-2026-7636 on NVD →

[en] Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Authentication vulnerability in Soliloquy Team Slider by Soliloquy allows Cross-Site Scripting (XSS).This issue affects Slider by Soliloquy: from n/a through 2.7.6.

Affected:

up to 2.7.7

Fixed in:

2.7.7

Disclosed:

Aug 12, 2024

CVE-2024-35775 on NVD →

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripring due to a missing capability check on the Soliloquy editing functionality in all versions up to, and including, 2.7.6. This makes it possible for authenticated attackers with author-level acc...

CVSS:

6.4

Affected:

up to 2.7.6

Fixed in:

2.7.7

Disclosed:

Aug 7, 2024

CVE-2024-35775 on NVD →

[en] Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2.

Affected:

up to 2.7.3

Fixed in:

2.7.3

Disclosed:

Jun 11, 2024

CVE-2023-51519 on NVD →

The Slider by Soliloquy plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on a function in versions up to, and including, 2.7.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to view draft slider data.

CVSS:

4.3

Affected:

up to 2.7.2

Fixed in:

2.7.3

Disclosed:

Dec 27, 2023

CVE-2023-51519 on NVD →