Majeedraza Carousel Slider — known CVE vulnerabilities

Every CVE whose affected-product data names Majeedraza Carousel Slider, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2024-4372 — CVSS 5.4 (medium): The Carousel Slider WordPress plugin before 2.2.11 does not sanitise and escape some parameters, which could allow users with a role as low…
• CVE-2023-41848 — CVSS 5.3 (medium): Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2024-6850 — CVSS 4.8 (medium): The Carousel Slider WordPress plugin before 2.2.4 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2024-1712 — CVSS 4.7 (medium): The Carousel Slider WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2024-3703 — CVSS 4.7 (medium): The Carousel Slider WordPress plugin before 2.2.10 does not validate and escape some of its Slide options before outputting them back in…
• CVE-2024-45269 — CVSS 4.3 (medium): WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Carousel image selection…
• CVE-2024-45270 — CVSS 4.3 (medium): WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Hero image selection…