LayerSlider

LayerSlider has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2026; all 10 are fixed as of October 2026. Their average CVSS score is 7.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 4 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 4 of the records (40%). Other recurring categories include Cross-Site Scripting, Improper Authentication.

Every one of the 10 issues recorded for LayerSlider has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, most of them (3) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSHigh

7.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all LayerSlider vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-2879

LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

10 records


2026-09-24 00:00	LayerSlider <= 8.4.0 - Unauthenticated Stored Cross-Site Scripting LayerSlider <= 8.4.0	`CVE-2026-97253`	7.2 High	Rafie Muhammad	Yes
2024-05-22 00:00	LayerSlider 7.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ls_search_form Shortcode LayerSlider 7.11.0	`CVE-2024-4575`	6.4 Medium	haidv35	Yes
2024-04-02 00:00	LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection LayerSlider 7.9.11 – 7.10.0	`CVE-2024-2879`	9.8 Critical	1337_Wannabe	Yes
2023-11-14 00:00	LayerSlider <= 7.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting LayerSlider <= 7.7.9	`CVE-2023-47786`	6.4 Medium	Rafie Muhammad	Yes
2023-11-14 00:00	LayerSlider <= 7.7.9 - Cross-Site Request Forgery LayerSlider <= 7.7.9	`CVE-2023-47785`	4.3 Medium	Rafie Muhammad	Yes
2022-04-11 00:00	LayerSlider <= 7.1.1 - Admin+ Stored Cross-Site Scripting LayerSlider <= 7.1.1	`CVE-2022-1153`	5.5 Medium	Taurus Omar	Yes
2017-03-28 00:00	LayerSlider <= 6.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting LayerSlider < 6.2.1	`N/A`	8.8 High	0x21	Yes
2017-03-28 00:00	LayerSlider <= 6.2.0 - Cross-Site Request Forgery LayerSlider <= 6.2.0	`N/A`	8.8 High	WpHutte	Yes
2014-08-01 00:00	LayerSlider <= 4.6.1 - Cross-Site Request Forgery LayerSlider <= 4.6.1	`N/A`	8.8 High	Akastep	Yes
2014-08-01 00:00	LayerSlider <= 4.6.1 - Path Traversal LayerSlider <= 4.6.1	`N/A`	6.5 Medium	Akastep	Yes

Showing 1–10 of 10 reports