Medium
CVE-2026-14844
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filters
High
CVE-2026-56014
Master Slider – Responsive Touch Slider <= 3.11.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-48968
Master Slider – Responsive Touch Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58025
Master Slider <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-5291
Master Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes
Medium
CVE-2025-39412
Master Slider <= 3.11.1 - Missing Authorization
Medium
CVE-2024-13757
Master Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
Medium
CVE-2024-11731
Master Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode
Medium
CVE-2024-12173
Master Slider <= 3.10.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-37222
Master Slider <= 3.10.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-4375
Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
Medium
CVE-2023-6382
Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4470
Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32580
Master Slider – Responsive Touch Slider <= 3.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-32600
Master Slider <= 3.9.5 - Unauthenticated PHP Object Injection
Medium
CVE-2024-1449
Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0611
Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback
Medium
CVE-2023-6326
Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action
Medium
CVE-2018-20368
Master Slider <= 3.7.0 - Authenticated Stored Cross-Site Scripting
Medium
ae8a316f-a9ad-451a-9892-cf5068072a78
Master Slider <= 2.7.1 - Cross-Site Scripting
High
9391474f-8cf8-4e8b-b3e6-39b397b7b6b6
Master Slider - Responsive Touch Slider <= 2.5.1 - Authenticated Blind SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.