What’s Vulnerable › Products

shapedplugin Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your shapedplugin Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel version is affected

Latest shapedplugin Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel vulnerabilities

• CVE-2026-4665 — WP Carousel Free <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-caption' Attribute (CVSS 6.4)
• CVE-2024-5020 — Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library (CVSS 6.4)
• CVE-2024-2949 — Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sp_wp_carousel_shortcode' (CVSS 5.4)