CVE-2021-24300: Pickplugins Product Slider For Woocommerce

Medium severity, CVSS 6.1. EPSS: 10.6% chance of exploitation in the next 30 days.

The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue

Affected products

• Pickplugins Product Slider For Woocommerce: before 1.13.22 (fixed in 1.13.22)

Published 2021-05-24. Last modified 2026-06-17.