VendorsAvertamaster_sliderall versions

Vulnerabilities

Averta Master Slider

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

19CVEs

CVE-2024-32600

WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability

Published 2024-04-18 · Modified

9.6EPSS 0.005

CVE-2023-47508

WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)

Published 2023-11-16 · Modified

7.1EPSS 0.004

CVE-2024-37222

WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability

Published 2024-06-20 · Analyzed

7.1EPSS 0.003

CVE-2024-32580

WordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerability

Published 2024-04-18 · Modified

6.5EPSS 0.003

CVE-2024-6490

Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion

Published 2024-07-26 · Analyzed

6.5EPSS 0.002

CVE-2025-58025

WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability

Published 2025-09-22 · Modified

6.5EPSS 0.002

CVE-2024-1449

Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-03-02 · Modified

6.4EPSS 0.004

CVE-2024-4375

Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode

Published 2024-06-18 · Modified

6.4EPSS 0.003

CVE-2024-4470

Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-05-21 · Modified

6.4EPSS 0.003

CVE-2023-6382

Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-06-01 · Modified

6.4EPSS 0.003

CVE-2024-13757

Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode

Published 2025-03-05 · Analyzed

6.4EPSS 0.003

CVE-2024-11731

Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode

Published 2025-03-05 · Modified

6.4EPSS 0.003

CVE-2025-5291

Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes

Published 2025-06-17 · Analyzed

6.4EPSS 0.003

CVE-2018-20368

The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback.

Published 2018-12-23 · Modified

5.4EPSS 0.007

CVE-2023-6326

Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action

Published 2024-03-02 · Modified

5.4EPSS 0.003

CVE-2024-0611

Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback

Published 2024-03-02 · Modified

4.8EPSS 0.007

CVE-2025-39412

WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerability

Published 2025-05-19 · Modified

4.3EPSS 0.002

CVE-2023-50900

WordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability

Published 2024-06-19 · Analyzed

4.3EPSS 0.002

CVE-2024-12173

Master Slider < 3.10.5 - Editor+ Stored XSS

Published 2025-02-19 · Analyzed

3.5EPSS 0.003

Averta Master Slider

Security check