Pricing
Case studies
Login
Start trial
Master Slider
averta
Developer
3.11.0
Latest version
60,000
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
3 present
15 patched
2 Mitigation rules
CSRF to slider deletion vulnerability
< 3.10.0
29/01/2026
WordPress Master Slider - Responsive Touch Slider plugin <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode vulnerability
<= 3.10.6
31/12/2025
Cross Site Scripting (XSS) Vulnerability
<= 3.11.0
22/09/2025
Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes vulnerability
<= 3.10.8
17/06/2025
Broken Access Control vulnerability
<= 3.11.0
17/04/2025
Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode vulnerability
<= 3.10.7
04/03/2025
Editor+ Stored XSS vulnerability
< 3.10.5
19/02/2025
Reflected Cross Site Scripting (XSS) vulnerability
<= 3.10.0
20/06/2024
Cross Site Request Forgery (CSRF) vulnerability
<= 3.9.10
19/06/2024
Authenticated Stored Cross-Site Scripting vulnerability
<= 3.9.10
17/06/2024
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 3.9.9
21/05/2024
PHP Object Injection vulnerability
<= 3.9.5
16/04/2024
Cross Site Scripting (XSS) vulnerability
<= 3.9.8
16/04/2024
Authenticated(Editor+) Stored Cross-Site Scripting via slider callback vulnerability
<= 3.9.9
04/03/2024
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 3.9.10
04/03/2024
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 3.7.0
10/04/2021
Reflected Cross Site Scripting
<= 2.7.1
13/07/2016
Blind SQL Injection
<= 2.5.1
20/08/2015