What’s Vulnerable › Products
averta Master Slider – Responsive Touch Slider vulnerabilities
22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.
Check whether your averta Master Slider – Responsive Touch Slider version is affected
Latest averta Master Slider – Responsive Touch Slider vulnerabilities
- CVE-2026-14844 — Master Slider <= 3.11.2 - Contributor+ Stored XSS via ms_slider Shortcode Attributes (CVSS 6.8)
- CVE-2026-56014 — WordPress Master Slider plugin <= 3.11.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-48968 — WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-58025 — WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.4)
- CVE-2025-5291 — Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes (CVSS 5.4)
- CVE-2025-39412 — WordPress Master Slider plugin <= 3.11.0 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2024-13757 — Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode (CVSS 5.4)
- CVE-2024-11731 — Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode (CVSS 5.4)
- CVE-2024-12173 — Master Slider < 3.10.5 - Editor+ Stored XSS (CVSS 3.5)
- CVE-2024-6490 — Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion (CVSS 6.5)
- CVE-2024-37222 — WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2023-50900 — WordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2024-4375 — Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode (CVSS 5.4)
- CVE-2023-6382 — Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2024-4470 — Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2024-32600 — WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability (CVSS 9.6)
- CVE-2024-32580 — WordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-1449 — Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2024-0611 — Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback (CVSS 4.8)
- CVE-2023-6326 — Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action (CVSS 4.3)
- CVE-2023-47508 — WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
- CVE-2018-20368 — (CVSS 5.4)