What’s Vulnerable › Products

metaslider Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your metaslider Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider version is affected

Latest metaslider Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider vulnerabilities

• CVE-2026-18400 — Slider, Gallery, and Carousel by MetaSlider <= 3.111.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'delay' Post Meta Setting (CVSS 6.4)
• CVE-2025-5337 — Slider, Gallery, and Carousel by MetaSlider <= 3.98.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via aria-label Parameter (CVSS 5.4)
• CVE-2025-1203 — Slider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSS (CVSS 3.5)
• CVE-2025-1062 — Slider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSS (CVSS 3.5)
• CVE-2024-3285 — Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows <= 3.70.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via metaslider Shortcode (CVSS 5.4)
• CVE-2023-1473 — Responsive WordPress Slideshows 3.29.0 - Reflected XSS (CVSS 6.1)
• CVE-2022-2823 — Slider, Gallery, and Carousel by MetaSlider < 3.27.9 - Admin+ Stored Cross Site Scripting (CVSS 4.8)