Log in Start free

MetaSlider

Products

ProductCVEsExploitedLatest
Responsive Slider by MetaSlider4–Jun 15, 2026
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider3–Aug 6, 2026

Exploited and recent CVEs

  • CVE-2026-18400 Medium 6.4 Slider, Gallery, and Carousel by MetaSlider <= 3.111.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'delay' Post Meta Setting 0.4%
  • CVE-2026-39465 Critical 9.1 WordPress Responsive Slider by MetaSlider plugin <= 3.106.0 - Remote Code Execution (RCE) vulnerability 0.7%
  • CVE-2026-39467 High 7.2 WordPress Responsive Slider by MetaSlider plugin <= 3.106.0 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-5337 Medium 6.4 Slider, Gallery, and Carousel by MetaSlider <= 3.98.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via aria-label Parameter 0.3%
  • CVE-2025-26763 Critical 9.8 WordPress Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider Plugin <= 3.94.0 - PHP Object Injection vulnerability 0.7%
  • CVE-2025-24533 Medium 5.4 WordPress MetaSlider plugin <= 3.92.0 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2024-3285 Medium 6.4 Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows <= 3.70.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via metaslider Shortcode 0.3%