Skip to content

Known vulnerabilities in ShapedPlugin Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel

Is your version affected?

CVE Summary Score Published
CVE-2026-4665 The WP Carousel Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted fancybox… 6.4 Medium May 5, 2026
CVE-2024-5020 Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox… 6.4 Medium Dec 4, 2024
CVE-2024-3020 The plugin is vulnerable to PHP Object Injection in versions up to and including, 2.6.3 via deserialization of untrusted… 7.2 High Apr 10, 2024
CVE-2024-2949 The Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product… 6.4 Medium Apr 6, 2024

Other ShapedPlugin products