Skip to content
Sign in
6.5 Medium

CVE-2024-6490 During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an…

Description

During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delete all of the sliders inside Master Slider WordPress plugin through 3.9.10.

Affected products and versions

Product Affected versions Fixed in
Master Slider 3.9 earliest → 3.9.10 No fix stated
master_slider 3.9 earliest → 3.9.10 No fix stated

Other CVEs of Master Slider

The 3 CVEs of Master Slider →
CVE-2026-14844 The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes… 6.8 Medium CVE-2024-12173 The Master Slider WordPress plugin before 3.10.5 does not sanitise and escape some of its settings, which could allow… 3.5 Low
Track this CVE