Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider

Vulnerabilities 20Slug ml-sliderLatest version 3.109.0WordPress.org →

Minimum safe version

3.107.0

Update to 3.107.0 or later to address 20 fixable vulnerabilities

Latest available3.109.0 ✓

N/A

2026-04-20< 3.107.0

Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.106.0 - Authenticated (Editor+) Remote Code Execution

Wordfence CVE

High 7.2

2026-04-21< 3.107.0

CVE-2026-39467

CVE Wordfence

Medium 5.4

2025-06-13< 3.99.0

Slider, Gallery, and Carousel by MetaSlider <= 3.98.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via aria-label Parameter

Wordfence CVE

Low 3.5

2025-03-24< 3.95.0

Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.94.0 - Authenticated (Admin+) Stored Cross-Site Scripting

EUVD Wordfence CVE

Low 3.5

2025-03-24< 3.95.0

Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.94.0 - Authenticated (Admin+) Stored Cross-Site Scripting

EUVD Wordfence CVE

Critical 9.8

2025-02-22< 3.95.0

CVE-2025-26763

CVE EUVD Patchstack Wordfence

Medium 5.4

2025-01-27< 3.92.1

CVE-2025-24533

CVE EUVD Wordfence

Medium 5.4

2024-04-15< 3.70.1

WordPress Responsive Slider by MetaSlider Plugin <= 3.70.0 is vulnerable to Cross Site Scripting (XSS)

Patchstack CVE Wordfence

N/A

< 2.2

Meta Slider 2.1.6 - Multiple Full Path Disclosure

WPScan

N/A

< 3.17.2

MetaSlider < 3.17.2 - Authenticated Stored Cross-Site Scripting (XSS)

WPScan

Medium 6.1

2023-04-17< 3.29.1

CVE-2023-1473

CVE Patchstack WPScan

N/A

2023-03-22< 3.29.1

WordPress Meta Slider Plugin <= 3.29.0 is vulnerable to Cross Site Scripting (XSS)

Patchstack

N/A

2023-03-21< 3.28.1

WordPress Responsive Slider by MetaSlider Plugin <= 3.28.0 is vulnerable to Cross Site Request Forgery (CSRF)

Patchstack CVE

N/A

2023-03-20< 3.29.1

Slider, Gallery, and Carousel by MetaSlider <= 3.29.0 - Reflected Cross-Site Scripting

Wordfence

N/A

2014-08-01< 2.2

Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Plugin <= 2.1.6 - Full Path Disclosure

Wordfence

N/A

2020-08-28< 3.17.2

Slider, Gallery, and Carousel by MetaSlider <= 3.17.1 - Authenticated Stored Cross-Site Scripting

Wordfence

Medium 4.8

2023-09-14< 3.27.9

WordPress Responsive Slider by MetaSlider Plugin <= 3.27.8 is vulnerable to Cross Site Scripting (XSS)

Patchstack CVE Wordfence WPScan

N/A

2015-10-27< 2.2

WordPress Meta Slider Plugin <= 2.1.6 - Full Path Disclosure

Patchstack

N/A

2020-09-17< 3.17.2

WordPress Responsive Slider by MetaSlider plugin <= 3.17.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Patchstack

N/A

2014-08-01< 2.6

Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Plugin <= 2.5 - Cross-Site Scripting

Wordfence CVE Patchstack WPScan