WordPress security by component

MaxSlider

Plugin description

MaxSlider is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 16, 2024; the highest CVE/CNA score is 7.5.

Plugin slug: maxslider

Latest vulnerability

CVE-2024-47351: MaxSlider: Filesystem traversal

MaxSlider is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedOct 16, 2024

Safe version guidanceSee mitigation notes

		Safe version
Oct 16, 2024	CVE-2024-47351 MaxSlider: Filesystem traversal MaxSlider is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE7.5 NVDPending