Plugin icon

Layer Slider

LayerSlider

Vulnerabilities:

8

Last Updated:

April 5, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2024-05-22
Title
LayerSlider 7.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ls_search_form Shortcode
Fixed in
Fixed in 7.11.1
CVSS
6.4 (medium)
Published
2024-04-02
Title
LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 7.10.1
CVSS
9.8 (critical)
Published
2023-11-14
Title
LayerSlider < 7.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.7.10
CVSS
6.4 (medium)
Published
2023-11-14
Title
LayerSlider < 7.7.10 - Cross-Site Request Forgery
Fixed in
Fixed in 7.7.10
CVSS
4.3 (medium)
Published
2022-03-29
Title
LayerSlider < 7.1.2 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 7.1.2
CVSS
3.4 (low)
Published
2017-05-16
Title
LayerSlider <= 6.2.0 - CSRF / Authenticated Stored XSS & SQL Injection
Fixed in
Fixed in 6.2.1
CVSS
4.3 (medium)
Published
2014-08-01
Title
LayerSlider 4.6.1 - Style Editing CSRF
Fixed in
Fixed in 5.2.0
CVSS
4.3 (medium)
Published
2014-08-01
Title
LayerSlider 4.6.1 - Remote Path Traversal File Access
Fixed in
Fixed in 5.2.0
CVSS
4.3 (medium)