WordPress master-slider has 12 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2018-20368 | The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings valu | medium | 5.4 | =3.2.7 or =3.5.1 | – |
| CVE-2024-0611 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slides callback functi | medium | 4.4 | <3.9.10 | 3.9.10 |
| CVE-2024-1449 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_slide shor | medium | 6.4 | <3.9.10 | 3.9.10 |
| CVE-2024-12173 | The Master Slider WordPress plugin before 3.10.5 does not sanitise and escape some of its settings, which could allow high privilege users | low | 3.5 | <3.10.5 | 3.10.5 |
| CVE-2024-4375 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ms_layer' sh | medium | 6.4 | <=3.9.10 | – |
| CVE-2024-4470 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ms_slide_inf | medium | 6.4 | <3.9.10 | 3.9.10 |
| CVE-2023-6382 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ms_slide' sh | medium | 6.4 | <3.9.10 | 3.9.10 |
| CVE-2024-13757 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_layer shor | medium | 6.4 | <=3.10.6 | – |
| CVE-2024-11731 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_slider sho | medium | 6.4 | <3.10.7 | 3.10.7 |
| CVE-2025-5291 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's masterslider_ | medium | 6.4 | <3.10.9 | 3.10.9 |
| CVE-2023-6326 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl | medium | 5.4 | <3.10.0 | 3.10.0 |
| CVE-2024-6490 | During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to m | medium | 6.5 | <3.10.0 | 3.10.0 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked