Extension WordPress
Vulnérabilités Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
Cette page rassemble les failles publiées pour Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
7 fiches
WP Carousel Free <= 2.7.10 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-caption' Attribute
The WP Carousel Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted fancybox `data-caption` attributes in all versions up to, and including, 2.7.10. This is due to the `fancybox-config.js` script reading the carousel container's `id`…
*-2.7.10
2.7.11
04/05/2026
Carousel, Slider, Gallery by WP Carousel <= 2.7.3 – Authenticated (Admin+) Stored Cross-Site Scripting
The Carousel, Slider, Gallery by WP Carousel – Image Carousel with Lightbox & Photo Gallery, Video Slider, Post Carousel & Post Grid, Product Carousel & Product Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings…
*-2.7.3
2.7.4
31/01/2025
Multiple Plugins <= (Various Versions) – Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes…
*-2.6.8
2.6.9
03/12/2024
Carousel, Slider, Gallery by WP Carousel <= 2.6.8 – Authenticated (Editor+) Stored Cross-Site Scripting
The Carousel, Slider, Gallery by WP Carousel – Image Carousel with Lightbox & Photo Gallery, Video Slider, Post Carousel & Post Grid, Product Carousel & Product Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings…
*-2.6.8
2.6.9
30/10/2024
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 – Authenticated (Admin+) PHP Object Injection
The plugin is vulnerable to PHP Object Injection in versions up to and including, 2.6.3 via deserialization of untrusted input in the import function via the 'shortcode' parameter. This allows authenticated attackers, with administrator-level access to inject a…
*-2.6.3
2.6.4
09/04/2024
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'sp_wp_carousel_shortcode'
The Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the carousel widget…
*-2.6.3
2.6.4
05/04/2024
Carousel, Slider, Gallery by WP Carousel <= 2.5.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Carousel, Slider, Gallery by WP Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's shortcodes in versions up to, and including, 2.5.2 due to insufficient input sanitization and output escaping on supplied attributes. This…
*-2.5.2
2.5.3
22/12/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.