Metaslider

11 CVEs across 3 Metaslider products. Browse Metaslider vulnerabilities, severities, and proof-of-concept exploits.

Metaslider products with known CVEs

ProductCVEs
Slider\, Gallery\, And Carousel6
Responsive Slider By Metaslider4
Slider, Gallery, And Carousel By Metaslider – Image Slider, Video Slider3
Metaslider CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-18400Medium6.42026-08-06The Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'delay' Post…
CVE-2026-39465Critical9.12026-06-15Editor Remote Code Execution (RCE) in Responsive Slider by MetaSlider <= 3.106.0 versions.
CVE-2026-39467High7.22026-04-21Deserialization of Untrusted Data vulnerability in MetaSlider Responsive Slider by MetaSlider allows Object Injection.This issue affects Responsive Slider by M…
CVE-2025-5337Medium6.42025-06-14The Slider, Gallery, and Carousel by MetaSlider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘aria-label’ parameter in all version…
CVE-2025-1203Low3.52025-03-24The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which could allow high privi…
CVE-2025-1062Low3.52025-03-24The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which could allow high privi…
CVE-2025-26763Critical9.82025-02-22Deserialization of Untrusted Data vulnerability in MetaSlider Responsive Slider by MetaSlider ml-slider allows Object Injection.This issue affects Responsive S…
CVE-2025-24533Medium5.42025-01-27Cross-Site Request Forgery (CSRF) vulnerability in MetaSlider Responsive Slider by MetaSlider ml-slider allows Cross Site Request Forgery.This issue affects Re…
CVE-2024-3285Medium6.42024-04-11The Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu…
CVE-2023-1473Medium6.12023-04-17The Slider, Gallery, and Carousel by MetaSlider WordPress plugin 3.29.0 does not sanitise and escape a parameter before outputting it back in the page, leading…
CVE-2022-2823Medium4.82022-10-10The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.27.9 does not sanitise and escape some of its Gallery Image parameters, which could a…