Live › vulnerability › CVE-2026-115961
Go to dashboardThe bPlugins B Slider WordPress plugin does not neutralize input when generating web pages, enabling stored cross-site scripting. An attacker who can store content in the slider can run scripts in other users' browsers.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 11:29 UTC. All times on this page are UTC.
Sites running the B Slider plugin at version 2.2.2 or earlier are affected. The exposure depends on who can add slider content, since stored XSS needs a contributor-level or similar role to plant the payload. Sites that do not use the plugin can skip it.
No product ranges from the sources yet.
wp plugin get b-slider --field=version2.2.2 once the vendor publishes oneEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Slider b-slider allows Stored XSS.This issue affects B Slider: from n/a through 2.2.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-115961")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.