MetaSlider vulnerabilities
7 published CVEs name MetaSlider among the affected products.
- Published CVEs
- 7
- Last 12 months
- 3
- Critical
- 2
- Known exploited
- 0
Critical 2High 1Medium 4Low 0Not scored 0
CVEs per yearBy the year they were published
- 20241
- 20253
- 20263
Newest CVEs
- CVE-2026-18400
Slider, Gallery, and Carousel by MetaSlider <= 3.111.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'delay' Post Meta Setting
metaslider · Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider
Medium6.4 - CVE-2026-39465
WordPress Responsive Slider by MetaSlider plugin <= 3.106.0 - Remote Code Execution (RCE) vulnerability
MetaSlider · Responsive Slider by MetaSlider
Critical9.1 - CVE-2026-39467
WordPress Responsive Slider by MetaSlider plugin <= 3.106.0 - PHP Object Injection vulnerability
MetaSlider · Responsive Slider by MetaSlider
High7.2 - CVE-2025-5337
Slider, Gallery, and Carousel by MetaSlider <= 3.98.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via aria-label Parameter
metaslider · Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider
Medium6.4 - CVE-2025-26763
WordPress Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider Plugin <= 3.94.0 - PHP Object Injection vulnerability
MetaSlider · Responsive Slider by MetaSlider
Critical9.8 - CVE-2025-24533
WordPress MetaSlider plugin <= 3.92.0 - Cross Site Request Forgery (CSRF) vulnerability
MetaSlider · Responsive Slider by MetaSlider
Medium5.4 - CVE-2024-3285
Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows <= 3.70.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via metaslider Shortcode
metaslider · Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider
Medium6.4