Login Request a demo
CS
Product
Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
by shapedplugin · last CVE May 5, 2026
4
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities4Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3020
7.2
1%
Apr 10
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injection
Affected: through 2.6.3
CVE-2026-4665
6.4
0%
May 5
WP Carousel Free <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-caption' Attribute
Affected: through 2.7.10
CVE-2024-5020
6.4
0%
Dec 4
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
Affected: through 2.6.8
CVE-2024-2949
5.4
0%
Apr 6
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sp_wp_carousel_shortcode'
Affected: through 2.6.3
Showing 4