WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
master-slider
Published
2024-05-20
Title
Master Slider – Responsive Touch Slider < 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
master-slider
Published
2024-05-31
Title
Master Slider - Responsive Touch Slider < 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
master-slider
Published
2024-06-17
Title
Master Slider < 3.10.0 - Contributor+ Stored XSS via ms_layer Shortcode
Slug
master-slider
Published
2024-06-20
Title
Master Slider < 3.10.5 - Reflected Cross-Site Scripting
Slug
master-slider
Published
2024-07-05
Title
Master Slider < 3.10.0 - CSRF to slider deletion
Slug
master-slider
Published
2025-01-29
Title
Master Slider < 3.10.5 - Editor+ Stored XSS
Slug
master-slider
Published
2025-03-04
Title
Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
Slug
master-slider
Published
2025-03-04
Title
Master Slider – Responsive Touch Slider < 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode
Slug
master-slider
Published
2025-04-17
Title
Master Slider <= 3.11.0 - Missing Authorization
Slug
master-slider
Published
2025-06-16
Title
Master Slider < 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes
Slug
master-slider
Published
2025-09-22
Title
Master Slider <= 3.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
masterbip-for-elementor
Published
2024-10-31
Title
MasterBip para Elementor <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mastercurrency-wp
Published
2024-07-26
Title
Master Currency WP <= 1.1.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via Currency Converter Form Shortcode
Slug
masterslider
Published
2023-11-07
Title
Master Slider Pro <= 3.6.5 - Unauthenticated PHP Object Injection
Slug
masterslider
Published
2023-11-07
Title
Master Slider Pro <= 3.6.5 - Reflected Cross-Site Scripting
Slug
masterslider
Published
2023-11-07
Title
Master Slider Pro <= 3.6.5 - Authenticated (Editor+) SQL Injection
Slug
masterslider
Published
2025-10-27
Title
Master Slider Pro <= 3.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
masterstudy-elementor-widgets
Published
2024-06-27
Title
Masterstudy Elementor Widgets < 1.2.3 - Missing Authorization
Slug
masterstudy-elementor-widgets
Published
2025-10-12
Title
Masterstudy Elementor Widgets < 1.2.5 - Missing Authorization
Slug
masterstudy-elementor-widgets
Published
2025-10-12
Title
Masterstudy Elementor Widgets < 1.2.5 - Missing Authorization
Slug
masterstudy-lms-learning-management-system
Published
2022-02-01
Title
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
Slug
masterstudy-lms-learning-management-system
Published
2023-06-15
Title
MasterStudy LMS < 3.0.9 - Contributor+ Stored XSS
Slug
masterstudy-lms-learning-management-system
Published
2023-06-15
Title
MasterStudy LMS < 3.0.9 - Subscriber+ Course Category Creation
Slug
masterstudy-lms-learning-management-system
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
masterstudy-lms-learning-management-system
Published
2023-08-21
Title
MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation