CVE-2025-5337

概要

参考情報

• plugins.trac.wordpress.org/browser/ml-slider/tags/3.98.0/assets/metaslider/script.js · Product
• plugins.trac.wordpress.org/changeset/3309932/ml-slider/tags/3.99.0/assets/metaslider/script.js · Patch
• wordpress.org/plugins/ml-slider · Product
• wordfence.com/threat-intel/vulnerabilities/id/0e6492e5-a506-4d77-96d2-08f700b6ee76 · Third Party Advisory

slider, gallery, and carousel のその他の脆弱性

• CVE-2025-1203低 3.5The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which cou…
• CVE-2025-1062低 3.5The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which cou…
• CVE-2024-3285中 5.4The Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows plugin for WordPress is vulnerable to Stored Cross-Site Sc…
• CVE-2023-1473中 6.1The Slider, Gallery, and Carousel by MetaSlider WordPress plugin 3.29.0 does not sanitise and escape a parameter before outputting it back i…
• CVE-2022-2823中 4.8The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.27.9 does not sanitise and escape some of its Gallery Image parame…