Vulnerabilities / Post Carousel
Post Carousel vulnerabilities
Advisories WPSec published for Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News. Other sources may list more. Its attack surface: Post Carousel on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-22 | WPSEC-2026-1456 | Post Carousel <= 4.0.8 - Authenticated (Contributor+) Sensitive Information Exposure via Saved Template Shortcode | Medium 4.3 | 4.0.9 |
| 2026-10-22 | WPSEC-2026-1455 | Post Carousel <= 4.0.8 - Unauthenticated Password-Protected Post Content and Non-Public Post Disclosure via sp_smart_post_block_all_post_query AJAX Action | Medium 5.3 | 4.0.9 |
| 2026-10-22 | WPSEC-2026-1454 | Post Carousel <= 4.0.8 - Unauthenticated Non-Public Post Type Information Exposure via Smart Search REST Endpoint | Medium 5.3 | 4.0.9 |
License: CC BY 4.0