Threat Database

Threat Entry Updated 2026-06-17

Master Slider - SQL Injection (CVE-2023-47506)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Master slider Master Slider Pro allows SQL Injection.This issue affects Master Slider Pro: from n/a through 3.6.5.

PLUGIN Master Slider

CVE-2023-47506

HIGH CVSS 7.6 2023-12-18

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Master Slider - Cross-Site Scripting (XSS) (CVE-2023-47508)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Averta Master Slider Pro plugin

PLUGIN Master Slider

CVE-2023-47508

HIGH CVSS 7.1 2023-11-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Master Slider - Cross-Site Scripting (XSS) (CVE-2018-20368)

The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback.

PLUGIN Master Slider

CVE-2018-20368

MEDIUM CVSS 5.4 2018-12-23

Risk Score

Open Full Technical Breakdown