Metaslider Slider, Gallery, And Carousel — known CVE vulnerabilities

Every CVE whose affected-product data names Metaslider Slider, Gallery, And Carousel, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2024-3285 — CVSS 6.4 (medium): The Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows plugin for WordPress is vulnerable to Stored Cross-Site…
• CVE-2025-5337 — CVSS 6.4 (medium): The Slider, Gallery, and Carousel by MetaSlider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘aria-label’…
• CVE-2023-1473 — CVSS 6.1 (medium): The Slider, Gallery, and Carousel by MetaSlider WordPress plugin 3.29.0 does not sanitise and escape a parameter before outputting it back…
• CVE-2022-2823 — CVSS 4.8 (medium): The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.27.9 does not sanitise and escape some of its Gallery Image…
• CVE-2025-1062 — CVSS 3.5 (low): The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which…
• CVE-2025-1203 — CVSS 3.5 (low): The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which…