Carousel, Slider, Gallery By Wp Carousel

carousel,_slider,_gallery_by_wp_carousel

Vendor: Techearty • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-4002 1Techearty 1Carousel, Slider, Gallery By Wp Carousel Jun 17, 2026 May 15, 2025 N/A· v4 3.5 LOW· v3 N/A· v2 The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting a...Show more The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less
CVE-2024-13314 1Techearty 1Carousel, Slider, Gallery By Wp Carousel Jun 17, 2026 Feb 21, 2025 N/A· v4 3.5 LOW· v3 N/A· v2 The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.7.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting a...Show more The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.7.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).Show less
CVE-2022-4482 1Techearty 1Carousel, Slider, Gallery By Wp Carousel Jun 17, 2026 Jan 16, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.5.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low...Show more The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.5.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.Show less