Plugin icon

Master Slider – Responsive Touch Slider

master-slider

Vulnerabilities:

19

Last Updated:

August 9, 2025

Active Installs:

70000

Published
Title
Fixed in
CVSS
Published
2025-09-22
Title
Master Slider <= 3.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2025-06-16
Title
Master Slider < 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes
Fixed in
Fixed in 3.10.9
CVSS
6.4 (medium)
Published
2025-04-17
Title
Master Slider <= 3.11.0 - Missing Authorization
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-03-04
Title
Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2025-03-04
Title
Master Slider – Responsive Touch Slider < 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode
Fixed in
Fixed in 3.10.8
CVSS
6.4 (medium)
Published
2025-01-29
Title
Master Slider < 3.10.5 - Editor+ Stored XSS
Fixed in
Fixed in 3.10.5
CVSS
3.5 (low)
Published
2024-07-05
Title
Master Slider < 3.10.0 - CSRF to slider deletion
Fixed in
Fixed in 3.10.0
CVSS
4.3 (medium)
Published
2024-06-20
Title
Master Slider < 3.10.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.10.5
CVSS
7.1 (high)
Published
2024-06-17
Title
Master Slider < 3.10.0 - Contributor+ Stored XSS via ms_layer Shortcode
Fixed in
Fixed in 3.10.0
CVSS
5.9 (medium)
Published
2024-05-31
Title
Master Slider - Responsive Touch Slider < 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.9.10
CVSS
6.4 (medium)
Published
2024-05-20
Title
Master Slider – Responsive Touch Slider < 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.9.10
CVSS
6.4 (medium)
Published
2024-04-16
Title
Master Slider – Responsive Touch Slider < 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.9.9
CVSS
6.4 (medium)
Published
2024-04-16
Title
Master Slider < 3.9.7 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 3.9.7
CVSS
9.8 (critical)
Published
2024-03-01
Title
Master Slider < 3.10.0 - Sliders Deletion via CSRF
Fixed in
Fixed in 3.10.0
CVSS
5.4 (medium)
Published
2024-03-01
Title
Master Slider < 3.10.0 - Contributor+ Stored XSS
Fixed in
Fixed in 3.10.0
CVSS
5.9 (medium)
Published
2024-03-01
Title
Master Slider < 3.9.10 - Editor+ Stored XSS via slider callback
Fixed in
Fixed in 3.9.10
CVSS
3.5 (low)
Published
2018-11-14
Title
Master Slider < 3.7.1 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.7.1
CVSS
6.6 (medium)
Published
2016-07-13
Title
Master Slider < 2.8.0 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.8.0
CVSS
7.1 (high)
Published
2015-08-20
Title
Master Slider < 2.5.2 - Authenticated Blind SQL Injection
Fixed in
Fixed in 2.5.2
CVSS
9.0 (critical)