Advisories · Technology

wpWax Product Carousel Slider & Grid Ultimate for WooCommerce.

Every CVE that names wpWax Product Carousel Slider & Grid Ultimate for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-24681 CVE record

CVSS 5.9 Medium

WordPress Product Carousel Slider & Grid Ultimate for WooCommerce Plugin <= 1.10.0 - Cross Site Scripting (XSS) vulnerability
- wpWax Product Carousel Slider & Grid Ultimate for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 24 Jan 2025
CVE-2024-12040 CVE record

CVSS 8.8 High

Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion via 'theme'
- wpwax Product Carousel Slider & Grid Ultimate for WooCommerce
- File inclusion
Not analysed yet 12 Dec 2024
CVE-2024-44048 CVE record

CVSS 6.5 Medium

WordPress Product Carousel Slider & Grid Ultimate for WooCommerce plugin <= 1.9.10 - Authenticated Local File Inclusion vulnerability
- wpWax Product Carousel Slider & Grid Ultimate for WooCommerce
- File inclusion
Not analysed yet 23 Sept 2024
CVE-2024-1950 CVE record

CVSS 7.5 High

Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.7 - Authenticated(Contributor+) PHP Object Injection
- wpwax Product Carousel Slider & Grid Ultimate for WooCommerce
- Insecure deserialization
Not analysed yet 13 Mar 2024