CVE-2025-39412

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/master-slider/vulnerability/wordpress-master-slider-plugin-3-10-7-broken-access-control-vulnerability · Third Party Advisory

master slider のその他の脆弱性

• CVE-2025-58025中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta Master Slider master-slider all…
• CVE-2025-5291中 5.4The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's masterslider_…
• CVE-2024-13757中 5.4The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_layer shor…
• CVE-2024-11731中 5.4The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ms_slider sho…
• CVE-2024-12173低 3.5The Master Slider WordPress plugin before 3.10.5 does not sanitise and escape some of its settings, which could allow high privilege users …