High · 7.6 CVE-2023-47506 EUVD-2023-51617GHSA-whhc-qmvw-65jq

WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to SQL Injection

Published Dec 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Master slider Product: Master Slider Pro

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Master slider Master Slider Pro allows SQL Injection.This issue affects Master Slider Pro: from n/a through 3.6.5.

Affected products

Vendor	Product	Affected	Fixed
Master slider	Master Slider Pro	≤ 3.6.5	—

References

https://patchstack.com/database/vulnerability/masterslider/wordpress-master-slider-pro-plugin-3-6-5-authenticated-editor-sql-injection-vulnerability?_s_id=cve vdb-entry