Master Slider
averta
Developer
3.11.0
Latest version
60,000
Installations
No date
Last updated
Vulnerability history
3 present
15 fixed
2 Mitigation rules
- CSRF to slider deletion vulnerability< 3.10.0Jan 29, 2026
- WordPress Master Slider - Responsive Touch Slider plugin <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode vulnerability<= 3.10.6Dec 31, 2025
- Cross Site Scripting (XSS) Vulnerability<= 3.11.0Sep 22, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes vulnerability<= 3.10.8Jun 17, 2025
- Broken Access Control vulnerability<= 3.11.0Apr 17, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode vulnerability<= 3.10.7Mar 4, 2025
- Editor+ Stored XSS vulnerability< 3.10.5Feb 19, 2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 3.10.0Jun 20, 2024
- Cross Site Request Forgery (CSRF) vulnerability<= 3.9.10Jun 19, 2024
- Authenticated Stored Cross-Site Scripting vulnerability<= 3.9.10Jun 17, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.9.9May 21, 2024
- PHP Object Injection vulnerability<= 3.9.5Apr 16, 2024
- Cross Site Scripting (XSS) vulnerability<= 3.9.8Apr 16, 2024
- Authenticated(Editor+) Stored Cross-Site Scripting via slider callback vulnerability<= 3.9.9Mar 4, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.9.10Mar 4, 2024
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 3.7.0Apr 10, 2021
- Reflected Cross Site Scripting<= 2.7.1Jul 13, 2016
- Blind SQL Injection<= 2.5.1Aug 20, 2015