Theme Blvd Sliders Vulnerabilities

The Theme Blvd Sliders plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfu...

CVSS:

6.1

Affected:

up to 1.2.5

Fix:

No patched version reported

Disclosed:

May 2, 2025

CVE-2025-46456 on NVD →

The following plugins and themes for WordPress are vulnerable to arbitrary option deletion and user data manipulation: Theme Blvd Shortcodes plugin <= 1.5.2 , Theme Blvd Widget Areas plugin < = 1.2.2, Theme Blvd Layout Builder plugin <= 2.0.1, Theme Blvd Sliders plugin <= 1.2.3, WP Jump Start theme <= 1.2.4, Alyeska th...

CVSS:

6.5

Affected:

up to 1.2.3

Fixed in:

1.2.4

Disclosed:

Nov 8, 2014