cleantalk
Vulnerabilities and Security Researches

Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, P, PSC-2026-64634

PSC, Research URL

PSC-2026-64634

Published on
Mar 27, 2026
Research Description
Slider and page builder addons expand the WordPress attack surface because they introduce rich front-end rendering, store complex widget settings, and often allow custom styling or script-like configuration through builder controls. In practice, weaknesses here most commonly translate into stored XSS through unsafe output, CSRF-driven settings changes, unauthorized access to editing features, or information disclosure via misprotected endpoints and diagnostics. Prime Slider – Addons for Elementor version 4.1.10 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64634, confirming that the plugin was reviewed from a secure code perspective with attention to the most common exploitation paths for Elementor widget and content-rendering plugins.
Affected versions
Min 4.1.11, max 4.1.11.
Status
SAFE & CERTIFIED