CVE-2025-26763

The MetaSlider Image Slider Video Slider WordPress plugin has a security flaw in versions 3.94.0 and earlier that allows attackers with Editor-level access or higher to inject malicious PHP objects into the system through untrusted input deserialization. This vulnerability relies on the presence of another plugin or theme containing a POP chain, which would enable the attacker to perform actions such as deleting files, retrieving sensitive information, or executing code based on the specific POP chain present.

Based on public CVE data (MITRE/NVD).