WP Security CheckVulnerability data as of October 22, 2026

Known vulnerabilities in Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider

Slider, gallery, carousel plugin for WordPress. Build your image slider, video slider, post slider, YouTube slider, or WooCommerce product slider.

14Reported vulnerabilities
7.2Highest CVSS score
3.111.2Latest version
500,000+Active installs

What to do now

Update Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider to 3.111.1 or later. 14 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 5, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-1473 Medium 6.1 0.5% Before 3.29.1 3.29.1 April 17, 2023
CVE-2022-2823 Medium 4.8 0.6% Before 3.27.9 3.27.9 October 10, 2022
CVE-2014-4846 Medium 4.3 1.6% 2.5 to 2.5 (inclusive) 2.6 July 10, 2014
CVE-2026-39465 High 7.2 0.8% 3.106.0 and earlier 3.107.0 April 20, 2026
CVE-2025-1203 Low 3.5 0.3% Before 3.95.0 3.95.0 March 24, 2025
CVE-2025-1062 Low 3.5 0.3% Before 3.95.0 3.95.0 March 24, 2025
CVE-2025-26763 High 7.2 0.7% 3.94.0 and earlier 3.95.0 February 14, 2025
CVE-2026-39467 Medium 6.6 0.5% 3.106.0 and earlier 3.107.0 April 20, 2026
CVE-2026-18400 Medium 6.4 0.4% 0 to 3.111.0 (inclusive) 3.111.1 August 6, 2026
WF-f5292c55-6445-4aec-b06e-6e625794d842 Medium 6.4 — Before 3.17.2 3.17.2 August 28, 2020
CVE-2025-5337 Medium 5.4 0.3% Before 3.99.0 3.99.0 June 14, 2025
CVE-2024-3285 Medium 5.4 0.3% Before 3.70.1 3.70.1 April 11, 2024
WF-d67cd96b-6fec-44db-be50-395bed199e9b Medium 5.3 — 2.1.6 and earlier 2.2 August 1, 2014
CVE-2025-24533 Medium 4.3 0.1% 3.92.0 and earlier 3.92.1 November 9, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.