WordPress plugin
Master Slider – Responsive Touch Slider security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High2
- Medium18
- Low0
All Master Slider – Responsive Touch Slider vulnerabilities
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
<3.11.5Update to 3.11.5
- High7.2Unauthenticated Stored Cross-Site Scripting
≤3.11.2No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.10.8Update to 3.10.9
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.11.1Update to 3.11.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via masterslider_pb and ms_slide Shortcodes
≤3.10.8Update to 3.10.9
- Medium4.3Missing Authorization
≤3.11.1Update to 3.11.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
≤3.10.6Update to 3.10.7
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider Shortcode
≤3.10.7Update to 3.10.8
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤3.10.0Update to 3.10.5
- Medium6.1Reflected Cross-Site Scripting
≤3.10.0Update to 3.10.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
≤3.9.10Update to 3.10.0
- Medium6.4Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.9.9Update to 3.9.10
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.9.9Update to 3.9.10
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.9.8Update to 3.9.9
- Critical9.8Unauthenticated PHP Object Injection
≤3.9.5Update to 3.9.7
- Medium5.4Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action
≤3.9.10Update to 3.10.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.9.10Update to 3.10.0
- Medium4.4Authenticated(Editor+) Stored Cross-Site Scripting via slider callback
≤3.9.9Update to 3.9.10
- Medium5.4Authenticated Stored Cross-Site Scripting
≤3.7.0Update to 3.7.5
- Medium6.1Cross-Site Scripting
<2.8.0Update to 2.8.0
- High8.8Responsive Touch Slider <= 2.5.1 - Authenticated Blind SQL Injection
<2.5.2Update to 2.5.2
Master Slider – Responsive Touch Slider: common questions
Does Master Slider – Responsive Touch Slider have known vulnerabilities?
Yes. VulnCrest Radar lists 21 known vulnerabilities in Master Slider – Responsive Touch Slider: 1 critical, 2 high, 18 medium. At least one is not fixed in the latest version.
How do I check which version of Master Slider – Responsive Touch Slider I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Master Slider – Responsive Touch Slider vulnerability?
CVE-2026-14844, published Sep 18, 2026: Master Slider < 3.11.5 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Master Slider – Responsive Touch Slider vulnerability listed in CISA KEV?
No. None of the known Master Slider – Responsive Touch Slider vulnerabilities is currently listed in the CISA KEV catalog.