Master Slider
Averta · 19 CVEs
WordPress Master Slider plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability
Jun 25, 2026
WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerability
May 27, 2026
WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability
Sep 22, 2025
Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Sho…
Jun 17, 2025
WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerability
May 19, 2025
Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_sli…
Mar 5, 2025
Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_lay…
Mar 5, 2025
Master Slider < 3.10.5 - Editor+ Stored XSS
Feb 19, 2025
Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion
Jul 26, 2024
WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability
Jun 20, 2024
WordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability
Jun 19, 2024
Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_lay…
Jun 18, 2024
Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Jun 1, 2024
Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
May 21, 2024
WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability
Apr 18, 2024
WordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerability
Apr 18, 2024
Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mar 2, 2024
Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callba…
Mar 2, 2024
Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action
Mar 2, 2024
WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)
Nov 16, 2023
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the…
Dec 23, 2018
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-56014 | WordPress Master Slider plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability | HIGH | 0.25% | Jun 25, 2026 |
| CVE-2026-48968 | WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.22% | May 27, 2026 |
| CVE-2025-58025 | WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability | MEDIUM | 0.21% | Sep 22, 2025 |
| CVE-2025-5291 | Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes | MEDIUM | 0.26% | Jun 17, 2025 |
| CVE-2025-39412 | WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerability | MEDIUM | 0.23% | May 19, 2025 |
| CVE-2024-11731 | Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode | MEDIUM | 0.28% | Mar 5, 2025 |
| CVE-2024-13757 | Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode | MEDIUM | 0.29% | Mar 5, 2025 |
| CVE-2024-12173 | Master Slider < 3.10.5 - Editor+ Stored XSS | LOW | 0.34% | Feb 19, 2025 |
| CVE-2024-6490 | Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion | MEDIUM | 0.23% | Jul 26, 2024 |
| CVE-2024-37222 | WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability | HIGH | 0.33% | Jun 20, 2024 |
| CVE-2023-50900 | WordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability | MEDIUM | 0.16% | Jun 19, 2024 |
| CVE-2024-4375 | Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode | MEDIUM | 0.32% | Jun 18, 2024 |
| CVE-2023-6382 | Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 0.32% | Jun 1, 2024 |
| CVE-2024-4470 | Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 0.32% | May 21, 2024 |
| CVE-2024-32600 | WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability | CRITICAL | 0.49% | Apr 18, 2024 |
| CVE-2024-32580 | WordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.32% | Apr 18, 2024 |
| CVE-2024-1449 | Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 0.43% | Mar 2, 2024 |
| CVE-2024-0611 | Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback | MEDIUM | 0.65% | Mar 2, 2024 |
| CVE-2023-6326 | Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action | MEDIUM | 0.26% | Mar 2, 2024 |
| CVE-2023-47508 | WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS) | HIGH | 0.41% | Nov 16, 2023 |
| CVE-2018-20368 | The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback. | MEDIUM | 0.70% | Dec 23, 2018 |
Showing 1 to 19 of 19 CVEs