Known vulnerabilities in Product Carousel Slider & Grid Ultimate for WooCommerce

The most intuitive solution to make your eCommerce site visually appealing. Create & customize WooCommerce product carousel, sliders, or grids easily

5Reported vulnerabilities

8.8Highest CVSS score

1.12.0Latest version

6,000+Active installs

What to do now

Update Product Carousel Slider & Grid Ultimate for WooCommerce to 1.10.1 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 8, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-12040	High 8.8	0.8%	0 to 1.9.10 (inclusive)	`1.10.0`	December 12, 2024
CVE-2024-1950	High 8.8	1.2%	Before 1.9.8	`1.9.8`	March 13, 2024
CVE-2024-44048	High 8.8	0.5%	1.9.10 and earlier	`1.10.0`	September 16, 2024
WF-12ad3c6c-9a01-4801-b754-79e6e1b2d2a3	Medium 6.4	—	1.8.6 and earlier	`1.8.7`	August 5, 2022
CVE-2025-24681	Medium 4.4	0.4%	1.10.0 and earlier	`1.10.1`	January 24, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.