Description

WordPress Plugin MetaSlider is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin MetaSlider version 3.3.1 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 3.3.2 or latest

References

https://wordpress.org/plugins/ml-slider/changelog/

Related Vulnerabilities

WordPress Plugin WPS Hide Login Security Bypass (1.9)

WordPress Plugin Anti-Malware Security and Brute-Force Firewall Cross-Site Scripting (4.15.22)

PHP Numeric Errors Vulnerability (CVE-2007-4657)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58024)

WordPress Plugin WordPress Meta Data and Taxonomies Filter (MDTF) Cross-Site Request Forgery (1.2.7.2)

Severity

High

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Information Disclosure