Back to Database
Status published
Medium
CVE-2021-24300
PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)
Vulnerability Description
The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-24300
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- 0xB9
More from PickPlugins
View All →CVE-2025-68605
WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability
Medium
6.5
CVE-2025-68000
WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability
Medium
6.5
CVE-2025-66058
WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability
Medium
6.5
CVE-2025-63043
WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability
Medium
5.3
CVE-2025-62929
WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability
Medium
6.5
Affected Vendor
PickPlugins
View all reports →Affected Software
PickPlugins Product Slider for WooCommerce
Vulnerable Versions:
1.13.22
Timeline
Official Publish:
May 24th, 2021
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N