Stored Cross-Site Scripting in Logo Slider Plugin for WordPress

CVE-2026-0609

What is CVE-2026-0609?

The Logo Slider – Logo Carousel, Logo Showcase & Client Logo Slider Plugin for WordPress is susceptible to a stored cross-site scripting vulnerability. This issue arises from inadequate input sanitization and output escaping in the 'logo-slider' shortcode, allowing authenticated users with author-level access or higher to inject malicious web scripts through the image alt text. Consequently, these scripts will execute on pages whenever they are accessed by users, potentially compromising user security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References