CVE-2026-57699

16th percentile - higher than 16% of all known CVEs

The Slider Pro plugin version 4.8.13 and earlier contains a Cross-Site Scripting (XSS) vulnerability exploitable by users with the Subscriber role. An attacker can inject a malicious script that executes in the victim's browser.

Risk includes session hijacking, redirection to malicious sites, or theft of sensitive data. The attack requires a subscriber account but can target administrators.

Update the Slider Pro plugin to the latest available version. Also restrict user privileges and apply the principle of least privilege.