master slider vulnerabilities and fixes

Recent CVEs affecting master slider, with upgrade or downgrade steps. 13 tracked.

Also searched as: masterslider.

master slider has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 13. Most recent: 2025-09-22. Highest priority: CVE-2024-32600 (score 40/100).

• CVE-2025-58025 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta M
• CVE-2025-5291 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2025-39412 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in averta Master Slider master-slider.This issue affects Master Slider: fr
• CVE-2024-6490 MEDIUM 6.5 UPGRADE During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which al
• CVE-2024-4470 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2024-4375 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2024-37222 HIGH 7.1 UPGRADE Cross Site Scripting (XSS) vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Maste
• CVE-2024-32600 HIGH 8.3 UPGRADE Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affects Master Slider: from
• CVE-2024-32580 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta M
• CVE-2024-13757 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2024-11731 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2023-6382 MEDIUM 6.4 UPGRADE The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2023-50900 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Averta Master Slider.This issue affects Master Slider: from

FAQ

How do I fix master slider vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is master slider being exploited right now?

None of the tracked master slider CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which master slider CVE should I patch first?

CVE-2024-32600 currently ranks highest (40/100): Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affects Master Slider: from.

RSS feed for master slider · ← Back to latest CVEs