CVE-2024-6490: During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delet

medium Affects master-slider (WordPress plugin). Feed 2026.10.29.1, updated 2026-10-28; published 2024-07-26; advisory modified 2026-06-17.

During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delet

Package: master-slider (WordPress plugin) WordPress
Affected versions: <3.10.0
Fixed in: 3.10.0
Severity: medium CVSS 6.5
Exploitation: not on CISA KEV · EPSS 0% (13.5th percentile)
Published: 2024-07-26
Source: nvd

References

CWE-352

NVD record master-slider (WordPress plugin) advisories

Am I affected?

Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden wordpress /var/www/html

Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.

Install docs How findings are ranked

Related advisories

CVE-2018-20368 medium The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax same package: master-slider (WordPress plugin)
CVE-2024-0611 medium The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored C same package: master-slider (WordPress plugin)
CVE-2024-1449 medium The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored C same package: master-slider (WordPress plugin)
CVE-2024-12173 low The Master Slider WordPress plugin before 3.10.5 does not sanitise and escape some of its same package: master-slider (WordPress plugin)
CVE-2024-4375 medium The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored C same package: master-slider (WordPress plugin)
CVE-2024-4470 medium The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored C same package: master-slider (WordPress plugin)