blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2024-6490

MEDIUM 6.5 CVSS 3.1
Published
July 26, 2024
Last modified
June 17, 2026
NVD status
Analyzed
Reported by
contact@wpscan.com
Weakness
CWE-352
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an unauthorized user to manipulate requests on behalf of the victim and thereby delete all of the sliders inside Master Slider WordPress plugin through 3.9.10.

Affected WordPress components

  • Master Slider – Responsive Touch Slider Plugin · master-slider
    Confirmed match Active
    Up to and including 3.9.10
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • Unknown Master Slider — Up to and including 3.9.10
  • averta master_slider — Up to and including 3.9.10
  • averta master_slider — Before 3.10.0

References

  • wpscan.com https://wpscan.com/vulnerability/5a56e5aa-841d-4be5-84da-4c3b7602f053/ Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record