Known vulnerabilities in Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel

Carousel, Slider, and Photo Gallery with Lightbox plugin. Create Image Carousel, Video Slider, Post Carousel, Post Grid, Product Carousel, and more.

5Reported vulnerabilities

7.2Highest CVSS score

2.7.13Latest version

70,000+Active installs

What to do now

Update Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel to 2.7.11 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 18, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2022-4482	Medium 5.4	0.5%	Before 2.5.3	`2.5.3`	January 16, 2023
CVE-2024-4002	Low 3.5	0.3%	Before 2.6.9	`2.6.9`	May 15, 2025
CVE-2024-13314	Low 3.5	0.4%	Before 2.7.4	`2.7.4`	February 21, 2025
CVE-2024-3020	High 7.2	1.0%	2.6.3 and earlier	`2.6.4`	April 9, 2024
CVE-2026-4665	Medium 6.4	0.3%	0 to 2.7.10 (inclusive)	`2.7.11`	May 5, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.