Bqworks vulnerabilities

Products

• Accordion Slider 4
• Slider Pro 3

Newest

• bqworks slider pro Slider Pro <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via sliderpro_multiple_images CVE-2026-86786 5.3 MediumOctober 6, 2026
• bqworks slider pro WordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability CVE-2026-57699 7.1 HighJuly 23, 2026
• bqworks accordion slider WordPress Accordion Slider plugin <= 1.9.13 - Cross Site Scripting (XSS) vulnerability CVE-2025-66092 6.5 MediumNovember 21, 2025
• bqworks accordion slider lite Accordion Slider Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11892 6.4 MediumJanuary 11, 2025
• bqworks grid accordion lite Grid Accordion Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11874 6.4 MediumJanuary 11, 2025
• bqworks slider pro lite Slider Pro Lite <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11899 6.4 MediumJanuary 7, 2025
• bqworks slider pro WordPress Slider Pro plugin <= 4.8.6 - Broken Access Control vulnerability CVE-2023-41865 4.3 MediumDecember 13, 2024
• bqworks accordion slider WordPress Accordion Slider plugin <= 1.9.6 - Broken Access Control vulnerability CVE-2023-40331 4.3 MediumDecember 13, 2024
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library CVE-2024-5020 6.4 MediumDecember 4, 2024
• bqworks accordion slider Accordion Slider <= 1.9.11 - Authenticted (Contributor+) Stored Cross-Site Scripting via HTML Attribute CVE-2024-9582 6.4 MediumOctober 16, 2024