CVE-2022-3074: Quantumcloud Slider Hero

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The Slider Hero WordPress plugin before 8.4.4 does not escape the slider Name, which could allow high-privileged users to perform Cross-Site Scripting attacks.

Affected products

• Quantumcloud Slider Hero: before 8.4.4 (fixed in 8.4.4)

Published 2022-09-26. Last modified 2026-06-17.