Can you provide an update?

Hi, please can you advise on this? Even if you confirm where the Vulnerability exists in the plugin code. We may be able to use a separate function to mitigate the issue. Otherwise a lot of people (including ourselves) will need to stop using this plugin in order to stay compliant with their security policies.

According to patchstack the plugin is vulnerable.

https://patchstack.com/database/vulnerability/slide-anything/wordpress-slide-anything-plugin-2-4-7-cross-site-scripting-xss-vulnerability?_a_id=110

When will the next update be released?

See: https://drive.google.com/file/d/17L_8GHNDvbg9wcYp2FF3d-zXHgB4zIrm/view?usp=sharing

This is email correspondence I had with “FearZzZz” back in March about this. He is the one who raised this XSS issue on PatchStack, and I created Version 2.4.9 to fix this issue. In the email you can see he confirmed that the issue had been resolved.

Not sure how to get PatchStack back in the loop, you would think they would periodically test to see if vulnerabilities still exist?

Thanks for your response and detail info, Simon.

It looks like you’ll need to open an account with them and get them updated on the fix.

https://patchstack.com/for-plugins/