Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-111111 · Microsoft / collected KEV context

cve-program · CVE-2026-111111

• https://www.wordfence.com/threat-intel/vulnerabilities/id/918dd473-dbe7-4352-95e9-3f705b09a4f2?source=cve
• https://plugins.trac.wordpress.org/browser/bdthemes-prime-slider-lite/tags/4.7.2/includes/class-content-guard.php#L329
• https://plugins.trac.wordpress.org/browser/bdthemes-prime-slider-lite/tags/4.7.2/includes/class-content-guard.php#L292
• https://plugins.trac.wordpress.org/browser/bdthemes-prime-slider-lite/tags/4.7.2/includes/class-content-guard.php#L128
• https://plugins.trac.wordpress.org/browser/bdthemes-prime-slider-lite/tags/4.7.2/includes/class-content-guard.php#L59
• https://plugins.trac.wordpress.org/browser/bdthemes-prime-slider-lite/tags/4.7.2/loader.php#L133
• https://plugins.trac.wordpress.org/changeset/3752580/bdthemes-prime-slider-lite/trunk/includes/class-content-guard.php

• Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape · Newly collected advisory · 28 Oct 2026