MaxSlider
MaxSlider has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is PHP Remote File Inclusion, behind 1 of the records (100%).
The one issue recorded for MaxSlider has a vendor fix available, so running the current release closes it.
All of these findings were reported by João Pedro Soares de Alcântara. MaxSlider is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-47351MaxSlider <= 1.2.3 - Authenticated (Contributor+) Local File Inclusion
Read the full analysisVulnerability Records
MaxSlider
Author
The CSSIgniter Team
MaxSlider is probably the easiest way to add a custom responsive slider to any page of your website. Create unlimited sliders with unlimited slides and custom settings per slider/slide! Check out the demo now! Features: Unlimited Sliders Unlimited slides per slider Responsive layouts Flexible settings per slide/slider Auto-slide option Slide effects Set the pause between slides Set a custom height per slider Show/Hide Previous/Next Arrows Set Background/Foreground arrow colors Set title text, title size and title color per slide Set subtitle text, subtitle size and subtitle color per slide Set button text, button background color, button text color, and button URL per slide Set horizontal and vertical content alignment per slide Grab the shortcode and show your sliders anywhere on your pages Block editor (Gutenberg) block available Visual Composer custom module available
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C