CVE-2025-68500
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
The Prime Slider – Addons For Elementor plugin up to version 4.0.10 contains a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to send requests from the server to internal resources.
Risk Assessment
An attacker can exploit SSRF to scan the internal network, read sensitive data, or attack other services in the infrastructure.
Recommendation
Update the Prime Slider plugin to the latest version that includes a fix for the SSRF vulnerability.
Other vulnerabilities in Prime Slider – Addons For Elementor
See all- CVE-2026-105875Medium
The Prime Slider – Addons For Elementor plugin for WordPress has a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions from n/a through 4.6.2.
- CVE-2026-4341Medium
The Prime Slider plugin for Elementor up to version 4.1.10 contains a Stored XSS vulnerability via the 'follow_us_text' setting in the Mount widget. Insufficient input sanitization and output escaping allow attackers with author-level access or higher to inject arbitrary scripts.
Original NVD description (English source)
Server-Side Request Forgery (SSRF) vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through <= 4.0.10.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS