CVE-2026-56014: WordPress Master Slider plugin <= 3.11.5 - Cross Site Scripting (XSS) vulnerability
Published Jun 25, 2026
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider master-slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.11.5.
Affected Software
1 affected component
Averta Master Slider<=3.11.5
Event History
Jun 25, 2026
CVE Published
via MITRE·01:12 PM
Data Sourced
via MITRE·01:12 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-56014?
CVE-2026-56014 has a high severity rating of 7.1.
2
What type of vulnerability is CVE-2026-56014?
CVE-2026-56014 is a Cross Site Scripting (XSS) vulnerability.
3
Who is affected by CVE-2026-56014?
CVE-2026-56014 affects users of the WordPress Master Slider plugin versions 3.11.2 and lower.
4
How do I fix CVE-2026-56014?
To fix CVE-2026-56014, update the WordPress Master Slider plugin to the latest version.
5
What is the impact of CVE-2026-56014?
The impact of CVE-2026-56014 allows unauthenticated users to execute malicious scripts on affected websites.