WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
master-slider
Published
2018-11-14
Title
Master Slider < 3.7.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
master-slider
Published
2024-03-01
Title
Master Slider < 3.10.0 - Sliders Deletion via CSRF
Slug
master-slider
Published
2024-03-01
Title
Master Slider < 3.9.10 - Editor+ Stored XSS via slider callback
Slug
master-slider
Published
2024-03-01
Title
Master Slider < 3.10.0 - Contributor+ Stored XSS
Slug
master-slider
Published
2024-04-16
Title
Master Slider < 3.9.7 - Unauthenticated PHP Object Injection
Slug
master-slider
Published
2024-04-16
Title
Master Slider – Responsive Touch Slider < 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
master-slider
Published
2024-05-20
Title
Master Slider – Responsive Touch Slider < 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
master-slider
Published
2024-05-31
Title
Master Slider - Responsive Touch Slider < 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
master-slider
Published
2024-06-17
Title
Master Slider < 3.10.0 - Contributor+ Stored XSS via ms_layer Shortcode
Slug
master-slider
Published
2024-06-20
Title
Master Slider < 3.10.5 - Reflected Cross-Site Scripting
Slug
master-slider
Published
2024-07-05
Title
Master Slider < 3.10.0 - CSRF to slider deletion
Slug
master-slider
Published
2025-01-29
Title
Master Slider < 3.10.5 - Editor+ Stored XSS
Slug
master-slider
Published
2025-03-04
Title
Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
Slug
master-slider
Published
2025-03-04
Title
Master Slider – Responsive Touch Slider < 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode
Slug
master-slider
Published
2025-04-17
Title
Master Slider <= 3.11.0 - Missing Authorization
Slug
master-slider
Published
2025-06-16
Title
Master Slider < 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes
Slug
master-slider
Published
2025-09-22
Title
Master Slider < 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
master-slider
Published
2026-05-27
Title
Master Slider – Responsive Touch Slider < 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
master-slider
Published
2026-06-19
Title
Master Slider – Responsive Touch Slider <= 3.11.2 - Unauthenticated Stored Cross-Site Scripting
Slug
masterbip-for-elementor
Published
2024-10-31
Title
MasterBip para Elementor <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mastercurrency-wp
Published
2024-07-26
Title
Master Currency WP <= 1.1.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via Currency Converter Form Shortcode
Slug
masterslider
Published
2023-11-07
Title
Master Slider Pro <= 3.6.5 - Unauthenticated PHP Object Injection
Slug
masterslider
Published
2023-11-07
Title
Master Slider Pro <= 3.6.5 - Reflected Cross-Site Scripting
Slug
masterslider
Published
2023-11-07
Title
Master Slider Pro <= 3.6.5 - Authenticated (Editor+) SQL Injection
Slug
masterslider
Published
2025-10-27
Title
Master Slider Pro <= 3.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting