Bqworks

9 CVEs across 6 Bqworks products. Browse Bqworks vulnerabilities, severities, and proof-of-concept exploits.

Bqworks products with known CVEs

ProductCVEs
Accordion Slider4
Slider Pro2
Accordion Slider1
Accordion Slider Lite1
Grid Accordion Lite1
Slider Pro Lite1
Bqworks CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57699High7.12026-07-23Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions.
CVE-2025-66092Medium6.52025-11-21Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bqworks Accordion Slider accordion-slider allows Stored X…
CVE-2024-11892Medium6.42025-01-11The Accordion Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'accordion_slider' shortcode in all versions up to…
CVE-2024-11874Medium6.42025-01-11The Grid Accordion Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'grid_accordion' shortcode in all versions up to, an…
CVE-2024-11899Medium6.42025-01-07The Slider Pro Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sliderpro' shortcode in all versions up to, and includi…
CVE-2023-41865Medium4.32024-12-13Missing Authorization vulnerability in bqworks Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Pro…
CVE-2023-40331Medium4.32024-12-13Missing Authorization vulnerability in bqworks Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acco…
CVE-2024-5020Medium6.42024-12-04Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in…
CVE-2024-9582Medium6.42024-10-16The Accordion Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘html’ attribute of an accordion slider in all versions up to, a…