Plugin icon

Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider

ml-slider

Vulnerabilities:

10

Last Updated:

December 16, 2025

Active Installs:

500000

Published
Title
Fixed in
CVSS
Published
2025-06-13
Title
Slider, Gallery, and Carousel by MetaSlider < 3.99.0 - Contributor+ Stored XSS via aria-label Parameter
Fixed in
Fixed in 3.99.0
CVSS
5.9 (medium)
Published
2025-03-02
Title
Slider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSS
Fixed in
Fixed in 3.95.0
CVSS
3.5 (low)
Published
2025-03-02
Title
Slider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSS
Fixed in
Fixed in 3.95.0
CVSS
3.5 (low)
Published
2025-02-14
Title
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider < 3.95.0 - Authenticated (Editor+) PHP Object Injection
Fixed in
Fixed in 3.95.0
CVSS
7.2 (high)
Published
2024-04-10
Title
Meta Slider < 3.70.1 - Contributor+ Stored Cross-Site Scripting via metaslider Shortcode
Fixed in
Fixed in 3.70.1
CVSS
6.4 (medium)
Published
2023-03-27
Title
Responsive WordPress Slideshows 3.29.0 - Reflected XSS
Fixed in
Fixed in 3.29.1
CVSS
7.5 (high)
Published
2022-09-14
Title
Slider, Gallery, and Carousel by MetaSlider < 3.27.9 - Admin+ Stored Cross Site Scripting
Fixed in
Fixed in 3.27.9
CVSS
3.4 (low)
Published
2020-09-17
Title
MetaSlider < 3.17.2 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.17.2
CVSS
5.9 (medium)
Published
2014-08-01
Title
Meta Slider 2.1.6 - Multiple Full Path Disclosure
Fixed in
Fixed in 2.2
CVSS
n/a
Published
2014-08-01
Title
Meta Slider <= 2.5 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.6
CVSS
n/a