CVE-2025-24533: WordPress MetaSlider plugin <= 3.92.0 - Cross Site Request Forgery (CSRF) vulnerability

Q: What is the severity of CVE-2025-24533?

CVE-2025-24533 is classified as a medium severity Cross-Site Request Forgery (CSRF) vulnerability.

Q: How do I fix CVE-2025-24533?

To fix CVE-2025-24533, update the MetaSlider Responsive Slider plugin to version 3.92.1 or later.

Q: Which versions are affected by CVE-2025-24533?

CVE-2025-24533 affects MetaSlider Responsive Slider versions up to and including 3.92.0.

Q: What are the potential impacts of CVE-2025-24533?

The potential impacts of CVE-2025-24533 include unauthorized actions being performed on behalf of a logged-in user without their consent.

Q: Who is impacted by CVE-2025-24533?

Users of the MetaSlider Responsive Slider plugin on WordPress versions up to 3.92.0 are impacted by CVE-2025-24533.

Published Jan 27, 2025

Updated

Cross-Site Request Forgery (CSRF) vulnerability in MetaSlider Responsive Slider by MetaSlider ml-slider allows Cross Site Request Forgery.This issue affects Responsive Slider by MetaSlider: from n/a through <= 3.92.0.

Affected Software

1 affected component

MetaSlider MetaSlider<=3.92.0

Remediation

Information

Update the WordPress Responsive Slider by MetaSlider plugin to the latest available version (at least 3.92.1).

Event History

Jan 27, 2025

CVE Published

via MITRE·01:59 PM

Data Sourced

via MITRE·01:59 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-24533?

CVE-2025-24533 is classified as a medium severity Cross-Site Request Forgery (CSRF) vulnerability.

How do I fix CVE-2025-24533?

To fix CVE-2025-24533, update the MetaSlider Responsive Slider plugin to version 3.92.1 or later.

Which versions are affected by CVE-2025-24533?