Advisories · Technology
shapedplugin Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel.
Every CVE that names shapedplugin Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
WP Carousel Free <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-caption' Attribute
- shapedplugin Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
- extendthemes Colibri Page Builder
- smub Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
- Cross-site scripting (XSS)
- CVSS 7.2 High
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Inje…
- shapedplugin Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
- Insecure deserialization
- CVSS 6.4 Medium
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cr…
- shapedplugin Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
- Cross-site scripting (XSS)