Vulnerabilities and security researches forcontent-slider-block content-slider-block

Nov 10, 2024

CVE, Research URL: CVE-2024-10667
Home page URL: Security reports for Content Slider Block – Display slider in a beautiful way.
Application: Content Slider Block – Display slider in a beautiful way.
Date: Nov 09, 2024
Research Description: The Content Slider Block plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1.5 via the [csb] shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to.
Affected versions: max 3.1.6.
Status: vulnerable

Oct 29, 2026

CVE, Research URL: CVE-2026-116398
Home page URL: Security reports for Content Slider Block – Display slider in a beautiful way.
Application: Content Slider Block – Display slider in a beautiful way.
Date: Oct 26, 2026
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Content Slider Block content-slider-block allows Stored XSS.This issue affects Content Slider Block: from n/a through 3.2.1.
Affected versions: max 3.2.2.
Status: vulnerable